Lucene search
+L

14239 matches found

CNNVD
CNNVD
added 2026/03/26 12:0 a.m.14 views

Drupal Google Analytics GA4 安全漏洞

Drupal Google Analytics GA4 is an integrated module for website traffic statistics and analysis developed by the Drupal company. Versions of Drupal Google Analytics GA4 prior to 1.1.14 contained a security vulnerability caused by improper input handling, which could lead to cross-site scripting...

6.1CVSS5.6AI score0.00243EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.9 views

Drupal AI 安全漏洞

Drupal AI is a module or solution within the Drupal community that integrates artificial intelligence capabilities. Versions of Drupal AI prior to 1.1.11 and 1.2.12 contained security vulnerabilities. These vulnerabilities were due to improper authorization, which could lead to resource injection...

7.5CVSS5.8AI score0.00232EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/25 6:31 p.m.6 views

EUVD-2026-15474

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Islandora allows Cross-Site Scripting XSS.This issue affects Islandora: from 0.0.0 before 2.17.5...

6.1CVSS5.8AI score0.00176EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/25 6:31 p.m.5 views

EUVD-2026-15473

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass.This issue affects CAPTCHA: from 0.0.0 before 1.17.0, from 2.0.0 before 2.0.10...

5.8AI score0.00268EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/25 6:31 p.m.6 views

EUVD-2026-15471

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Anti-Spam by CleanTalk allows Cross-Site Scripting XSS.This issue affects Anti-Spam by CleanTalk: from 0.0.0 before 9.7.0...

6.1CVSS5.8AI score0.00171EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/25 6:31 p.m.13 views

EUVD-2026-15476

Server-Side Request Forgery SSRF vulnerability in Drupal Drupal Canvas allows Server Side Request Forgery.This issue affects Drupal Canvas: from 0.0.0 before 1.1.1...

4.3CVSS5.8AI score0.00287EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/25 6:31 p.m.6 views

EUVD-2026-15479

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Responsive Favicons allows Cross-Site Scripting XSS.This issue affects Responsive Favicons: from 0.0.0 before 2.0.2...

6.1CVSS5.8AI score0.00185EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/25 6:31 p.m.11 views

EUVD-2026-15477

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting XSS.This issue affects SAML SSO - Service Provider: from 0.0.0 before 3.1.3...

6.1CVSS5.8AI score0.00193EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/25 6:31 p.m.9 views

EUVD-2026-15467

Cross-Site Request Forgery CSRF vulnerability in Drupal Theme Negotiation by Rules allows Cross Site Request Forgery.This issue affects Theme Negotiation by Rules: from 0.0.0 before 1.2.1...

6.3CVSS5.8AI score0.00098EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/25 6:31 p.m.4 views

EUVD-2026-15465

Incorrect Authorization vulnerability in Drupal Material Icons allows Forceful Browsing.This issue affects Material Icons: from 0.0.0 before 2.0.4...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/25 6:31 p.m.9 views

EUVD-2026-15451

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Quick Edit allows Cross-Site Scripting XSS.This issue affects Quick Edit: from 0.0.0 before 1.0.5, from 2.0.0 before 2.0.1...

6.1CVSS5.8AI score0.00136EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/25 6:31 p.m.6 views

EUVD-2026-15453

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal UI Icons allows Cross-Site Scripting XSS.This issue affects UI Icons: from 0.0.0 before 1.0.1, from 1.1.0 before 1.1.1...

6.1CVSS5.8AI score0.00149EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/25 6:31 p.m.11 views

EUVD-2026-15469

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Tagify allows Cross-Site Scripting XSS.This issue affects Tagify: from 0.0.0 before 1.2.49...

6.1CVSS5.8AI score0.00136EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/25 6:31 p.m.11 views

EUVD-2026-15423

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Login Disable allows Functionality Bypass.This issue affects Login Disable: from 0.0.0 before 2.1.3...

7.3CVSS5.8AI score0.00202EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/25 4:16 p.m.7 views

CVE-2026-3218

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Responsive Favicons allows Cross-Site Scripting XSS.This issue affects Responsive Favicons: from 0.0.0 before 2.0.2...

4.8CVSS0.00185EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/25 4:16 p.m.8 views

CVE-2026-3213

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Anti-Spam by CleanTalk allows Cross-Site Scripting XSS.This issue affects Anti-Spam by CleanTalk: from 0.0.0 before 9.7.0...

4.7CVSS0.00171EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/25 4:16 p.m.8 views

CVE-2026-3214

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass.This issue affects CAPTCHA: from 0.0.0 before 1.17.0, from 2.0.0 before 2.0.10...

6.5CVSS0.00268EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/25 4:16 p.m.4 views

CVE-2026-3215

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Islandora allows Cross-Site Scripting XSS.This issue affects Islandora: from 0.0.0 before 2.17.5...

5.4CVSS0.00176EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/25 4:16 p.m.6 views

CVE-2026-3216

Server-Side Request Forgery SSRF vulnerability in Drupal Drupal Canvas allows Server Side Request Forgery.This issue affects Drupal Canvas: from 0.0.0 before 1.1.1...

5CVSS0.00287EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/25 4:16 p.m.9 views

CVE-2026-3211

Cross-Site Request Forgery CSRF vulnerability in Drupal Theme Negotiation by Rules allows Cross Site Request Forgery.This issue affects Theme Negotiation by Rules: from 0.0.0 before 1.2.1...

4.3CVSS0.00098EPSS
SaveExploits0References1
Rows per page
Query Builder