17308 matches found
CVE-2025-3061 Material Admin - Critical - Unsupported - SA-CONTRIB-2025-006
Vulnerability in Drupal Material Admin.This issue affects Material Admin:...
CVE-2025-3061
A security vulnerability exists in Drupal Material Admin (all versions), a community admin theme for the Drupal backend. The flaw involves improper authentication (CWE-287), which could allow an attacker with administrator privileges to impact the confidentiality, integrity, and availability of a...
CVE-2025-3060
The Flattern – Multipurpose Bootstrap Business Profile Drupal theme is affected by a security vulnerability that impacts the confidentiality , integrity , and availability of all data. The issue requires administrator privileges to exploit. Due to a known security issue that has not been fixed by...
CVE-2025-3060 Flattern – Multipurpose Bootstrap Business Profile - Critical - Unsupported - SA-CONTRIB-2025-005
Vulnerability in Drupal Flattern – Multipurpose Bootstrap Business Profile.This issue affects Flattern – Multipurpose Bootstrap Business Profile:...
CVE-2025-3060 Flattern – Multipurpose Bootstrap Business Profile - Critical - Unsupported - SA-CONTRIB-2025-005
Vulnerability in Drupal Flattern – Multipurpose Bootstrap Business Profile.This issue affects Flattern – Multipurpose Bootstrap Business Profile:...
CVE-2025-3059 Profile Private - Critical - Unsupported - SA-CONTRIB-2025-002
Vulnerability in Drupal Profile Private.This issue affects Profile Private:...
CVE-2025-3059 Profile Private - Critical - Unsupported - SA-CONTRIB-2025-002
Vulnerability in Drupal Profile Private.This issue affects Profile Private:...
CVE-2025-3059
A security vulnerability exists in the Drupal Profile Private module (version **ibleold*.***), which allows for the exposure of sensitive information to an unauthorized actor . The issue affects the private profile functionality and can impact the confidentiality, integrity, and availability of ...
CVE-2025-3057
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Drupal core allows Cross-Site Scripting XSS.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3...
CVE-2025-31694
Incorrect Authorization vulnerability in Drupal Two-factor Authentication TFA allows Forceful Browsing.This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.10.0...
CVE-2025-31695
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Link field display mode formatter allows Cross-Site Scripting XSS.This issue affects Link field display mode formatter: from 0.0.0 before 1.6.0...
CVE-2025-31695
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Link field display mode formatter allows Cross-Site Scripting XSS.This issue affects Link field display mode formatter: from 0.0.0 before 1.6.0...
CVE-2025-31697
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Formatter Suite allows Cross-Site Scripting XSS.This issue affects Formatter Suite: from 0.0.0 before 2.1.0...
CVE-2025-31694
Incorrect Authorization vulnerability in Drupal Two-factor Authentication TFA allows Forceful Browsing.This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.10.0...
CVE-2025-31696
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal RapiDoc OAS Field Formatter allows Cross-Site Scripting XSS.This issue affects RapiDoc OAS Field Formatter: from 0.0.0 before 1.0.1...
CVE-2025-31686
Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10...
CVE-2025-31687
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal SpamSpan filter allows Cross-Site Scripting XSS.This issue affects SpamSpan filter: from 0.0.0 before 3.2.1...
CVE-2025-31685
Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10...