19165 matches found
CVE-2026-96374
The Project Browser module for Drupal is vulnerable to cross-site request forgery (CSRF) attacks because it fails to sufficiently validate administrative actions performed through the web user interface. An attacker could potentially exploit this to apply recipes or enable modules without proper ...
PT-2026-97668
The Cloud module enables users to manage cloud resources through Drupal. The module does not sufficiently sanitize user-controlled Git branch and repository URL values before passing them to shell commands in the Kubernetes integration. This vulnerability allows an attacker to execute arbitrary...
PT-2026-97680
This module enables you to retrieve and submit webforms via REST. The module doesn't sufficiently check permission to webform and webform submission entities when retrieving webform elements or fields...
PT-2026-97676
This module enables you to personalize content for anonymous and authenticated users by showing different blocks to visitors based on client-side conditions. The Smart Content Block submodule doesn't sufficiently check block access when it renders the blocks of a "Display Blocks" reaction through...
Smart Content - Moderately critical - Access bypass - SA-CONTRIB-2026-190
This module enables you to personalize content for anonymous and authenticated users by showing different blocks to visitors based on client-side conditions. The Smart Content Block submodule doesn't sufficiently check block access when it renders the blocks of a "Display Blocks" reaction through...
Drupal - Remote Code Execution
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations. id: CVE-2018-7600 info: name: Drupal - Remote Code Execution author:...
Drupal SEoL (7.x)
According to its version, Drupal is 7.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc...
CLSA-2026-1789642476 TuxCare security update for drupal/webform_multifile (1 CVE)
TuxCare rebuilt drupal/webformmultifile to address 1 CVE. Fixed in 7.1.6-p1+tuxcare...
CLSA-2026-1789638824 TuxCare security update for drupal/tfa_basic (1 CVE)
TuxCare rebuilt drupal/tfabasic to address 1 CVE. Fixed in 7.1.2-p1+tuxcare...
CLSA-2026-1789633654 TuxCare security update for drupal/form_builder (1 CVE)
TuxCare rebuilt drupal/formbuilder to address 1 CVE. Fixed in 7.1.22-p1+tuxcare...
CLSA-2026-1789633542 TuxCare security update for drupal/commerce_paybox (1 CVE)
TuxCare rebuilt drupal/commercepaybox to address 1 CVE. Fixed in 7.1.5-p1+tuxcare...
CLSA-2026-1789633448 TuxCare security update for drupal/coffee (1 CVE)
TuxCare rebuilt drupal/coffee to address 1 CVE. Fixed in 7.2.3-p1+tuxcare...
CLSA-2026-1789633295 TuxCare security update for drupal/protected_pages (1 CVE)
TuxCare rebuilt drupal/protectedpages to address 1 CVE. Fixed in 7.2.4-p1+tuxcare...
CLSA-2026-1789633080 TuxCare security update for drupal/filefield_paths (1 CVE)
TuxCare rebuilt drupal/filefieldpaths to address 1 CVE. Fixed in 7.1.2-p1+tuxcare...
CLSA-2026-1789632846 TuxCare security update for drupal/i18n (1 CVE)
TuxCare rebuilt drupal/i18n to address 1 CVE. Fixed in 7.1.35-p1+tuxcare...
CLSA-2026-1789632791 TuxCare security update for drupal/flag (1 CVE)
TuxCare rebuilt drupal/flag to address 1 CVE. Fixed in 7.3.9-p1+tuxcare...
CLSA-2026-1789632682 TuxCare security update for drupal/shs (1 CVE)
TuxCare rebuilt drupal/shs to address 1 CVE. Fixed in 7.1.10-p1+tuxcare...
CLSA-2026-1789632490 TuxCare security update for drupal/facebook_pixel (1 CVE)
TuxCare rebuilt drupal/facebookpixel to address 1 CVE. Fixed in 7.1.1-p1+tuxcare...