GHSA-73RR-HH4G-FPGX vulnerabilities

Vulnerabilities for packages: drupal, redisinsight, renovate, grafana-fips, langfuse, kubeflow-katib, semaphore, argo-workflows, graalvm, tileserver-gl, prism, vitess, langfuse-fips, npm, grafana, tileserver-gl-fips, thingsboard-fips, thingsboard, saf, sqlpad, ts-patch, actions-runner, librechat...

MiracleLinux 3 : drupal-6.4-3AXS3 (AXBA:2008-316:03)

The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXBA:2008-316:03 advisory. - Multiple cross-site request forgery CSRF vulnerabilities in forms in Drupal 6.x before 6.4 allow remote attackers to perform unspecified actions vi...

MiracleLinux 3 : drupal-6.30-1.AXS3 (AXSA:2014-234:01)

The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2014-234:01 advisory. Drupal is a free software package that allows an individual or a community of users to easily publish, manage and organize a wide variety of content ...

CVE-2025-14557

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Facebook Pixel facebookpixel allows Stored XSS.This issue affects Facebook Pixel: from 7.X-1.0 through 7.X-1.1...

CVE-2025-14556

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Flag allows Cross-Site Scripting XSS.This issue affects Flag: from 7.X-3.0 through 7.X-3.9...

CVE-2012-2339 vulnerabilities

Vulnerabilities for packages: drupal...

CVE-2009-1047 vulnerabilities

Vulnerabilities for packages: drupal...

CVE-2009-3156 vulnerabilities

Vulnerabilities for packages: drupal...

GHSA-9XFG-6WHQ-QVGM vulnerabilities

Vulnerabilities for packages: drupal...

GHSA-HGF8-PV4W-P39V vulnerabilities

Vulnerabilities for packages: drupal...

GHSA-H4QQ-2J4V-765M vulnerabilities

Vulnerabilities for packages: drupal...

GHSA-8H7R-J823-HW2Q vulnerabilities

Vulnerabilities for packages: drupal...

CVE-2009-3479 vulnerabilities

Vulnerabilities for packages: drupal...

CVE-2008-0462 vulnerabilities

Vulnerabilities for packages: drupal...

GHSA-JQ75-2M55-F6CV vulnerabilities

Vulnerabilities for packages: drupal...

CVE-2025-14557

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Facebook Pixel facebookpixel allows Stored XSS.This issue affects Facebook Pixel: from 7.X-1.0 through 7.X-1.1...

CVE-2025-14556

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Flag allows Cross-Site Scripting XSS.This issue affects Flag: from 7.X-3.0 through 7.X-3.9...

EUVD-2026-2429

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Facebook Pixel facebookpixel allows Stored XSS.This issue affects Facebook Pixel: from 7.X-1.0 through 7.X-1.1...

CVE-2025-14557

CVE-2025-14557 affects Drupal Facebook Pixel module (facebook_pixel) with stored XSS due to improper input neutralization during page generation. Affected versions are 7.X-1.0 through 7.X-1.1. The vulnerability can allow malicious script injection via input fields rendered on generated pages, as ...

CVE-2025-14557 XSS in Drupal 7 Facebook Pixel Module

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Facebook Pixel facebookpixel allows Stored XSS.This issue affects Facebook Pixel: from 7.X-1.0 through 7.X-1.1...