Lucene search
+L

14946 matches found

Cvelist
Cvelist
•added 2026/07/10 9:44 p.m.•47 views

CVE-2026-13243 Salesforce Suite - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-063

Cross-Site Request Forgery CSRF vulnerability in Drupal Salesforce Suite allows Cross Site Request Forgery. This issue affects Salesforce Suite versions: from 0.0.0 to 5.1.3...

0.00122EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/10 9:44 p.m.•91 views

CVE-2026-13243

The Drupal Salesforce Suite is vulnerable to a Cross-Site Request Forgery (CSRF) issue in versions 0.0.0 through 5.1.3 . The root cause is a failure to properly validate the OAuth handshake during interactive authentication, which could allow an attacker to hijack the authorization token and bind...

6.1AI score0.00122EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/10 9:44 p.m.•10 views

CVE-2026-13242 Geolocation Field - Critical - SQL Injection - SA-CONTRIB-2026-062

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Drupal Geolocation Field allows SQL Injection. This issue affects Geolocation Field versions: from 0.0.0 to 3.15.0...

6.1AI score0.00276EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/10 9:44 p.m.•48 views

CVE-2026-13242 Geolocation Field - Critical - SQL Injection - SA-CONTRIB-2026-062

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Drupal Geolocation Field allows SQL Injection. This issue affects Geolocation Field versions: from 0.0.0 to 3.15.0...

0.00276EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/10 9:44 p.m.•8 views

CVE-2026-13242

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Drupal Geolocation Field allows SQL Injection. This issue affects Geolocation Field versions: from 0.0.0 to 3.15.0...

6.1AI score0.00276EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/10 9:44 p.m.•89 views

CVE-2026-13242

The Drupal Geolocation Field module (versions 0.0.0 through 3.15.0 ) is vulnerable to SQL Injection due to improper neutralization of special elements in an SQL command. The root cause is that one of the provided views filters fails to sufficiently sanitize values when exposed to user input. The ...

6.1AI score0.00276EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/10 9:44 p.m.•9 views

CVE-2026-13240 Paragraphs - Less critical - Access bypass - SA-CONTRIB-2026-060

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0...

6.1AI score0.00269EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/10 9:44 p.m.•12 views

CVE-2026-13241 Paragraphs - Moderately critical - Access bypass - SA-CONTRIB-2026-061

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0...

6.1AI score0.00269EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/10 9:44 p.m.•47 views

CVE-2026-13241 Paragraphs - Moderately critical - Access bypass - SA-CONTRIB-2026-061

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0...

0.00269EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/10 9:44 p.m.•8 views

CVE-2026-13240

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0...

6.1AI score0.00269EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/10 9:44 p.m.•35 views

CVE-2026-13240

The Drupal Paragraphs module (versions 0.0.0 to 1.21.0 ) contains a missing authorization vulnerability that enables Forceful Browsing . Specifically, the optional Paragraphs Library module fails to sufficiently restrict access to unpublished library items when displayed in lists. For this vulner...

6.1AI score0.00269EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/07/10 9:44 p.m.•8 views

CVE-2026-13241

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0...

6.1AI score0.00269EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/10 9:44 p.m.•48 views

CVE-2026-13240 Paragraphs - Less critical - Access bypass - SA-CONTRIB-2026-060

Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0...

0.00269EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/10 9:44 p.m.•45 views

CVE-2026-13241

The Drupal Paragraphs module (versions 0.0.0 to 1.21.0 ) contains a Missing Authorization vulnerability that enables Forceful Browsing . The root cause is that the optional Paragraphs Library module fails to sufficiently restrict access to direct child paragraphs of library items through API endp...

6.1AI score0.00269EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/07/10 9:44 p.m.•58 views

CVE-2026-13239

The Drupal WissKI application is vulnerable to a Missing Authorization issue in the wisski_mirador submodule (versions 0.0.0 through 4.2.0). The root cause is a failure to sufficiently validate parameters submitted via a route before writing them to the session object, which can lead to Forceful ...

6.1AI score0.00266EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/07/10 9:44 p.m.•8 views

CVE-2026-13239

Missing Authorization vulnerability in Drupal WissKI allows Forceful Browsing. This issue affects WissKI versions: from 0.0.0 to 4.2.0...

6.1AI score0.00266EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/10 9:44 p.m.•46 views

CVE-2026-13239 WissKI - Critical - Access bypass - SA-CONTRIB-2026-059

Missing Authorization vulnerability in Drupal WissKI allows Forceful Browsing. This issue affects WissKI versions: from 0.0.0 to 4.2.0...

0.00266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/10 9:44 p.m.•10 views

CVE-2026-13239 WissKI - Critical - Access bypass - SA-CONTRIB-2026-059

Missing Authorization vulnerability in Drupal WissKI allows Forceful Browsing. This issue affects WissKI versions: from 0.0.0 to 4.2.0...

6.1AI score0.00266EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/10 9:44 p.m.•52 views

CVE-2026-13238

The Drupal Commerce Realex / Global Payments module (versions 0.0.0 through 3.0.2 ) is vulnerable to an incorrect authorization issue leading to forceful browsing . The root cause is that the module fails to sufficiently verify the authenticity of payment responses returned by Global Payments whe...

6.1AI score0.00217EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/10 9:44 p.m.•14 views

CVE-2026-13238 Commerce Realex / Global Payments - Moderately critical - Access Bypass - SA-CONTRIB-2026-058

Incorrect Authorization vulnerability in Drupal Commerce Realex / Global Payments allows Forceful Browsing. This issue affects Commerce Realex / Global Payments versions: from 0.0.0 to 3.0.2...

6.1AI score0.00217EPSS
SaveExploits0References1
Rows per page
Query Builder