Lucene search
+L

705 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/04 12:00 a.m.•2 views

CVE-2026-0944: Improper Check for Unusual or Exceptional Conditions

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Group invite allows Forceful Browsing.This issue affects Group invite: from 0.0.0 before 2.3.9, from 3.0.0 before 3.0.4, from 4.0.0 before 4.0.4...

5.3CVSS5.8AI score0.00229EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/28 8:16 p.m.•19 views

CVE-2025-14840

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal HTTP Client Manager allows Forceful Browsing.This issue affects HTTP Client Manager: from 0.0.0 before 9.3.13, from 10.0.0 before 10.0.2, from 11.0.0 before 11.0.1...

7.5CVSS0.00305EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/28 8:16 p.m.•24 views

CVE-2025-13985

Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue affects Entity Share: from 0.0.0 before 3.13.0...

5.3CVSS0.00217EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/28 8:16 p.m.•12 views

CVE-2025-13985

Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue affects Entity Share: from 0.0.0 before 3.13.0...

5.3CVSS5.8AI score0.00217EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/28 8:03 p.m.•12 views

CVE-2025-14840 HTTP Client Manager - Less critical - Information disclosure - SA-CONTRIB-2025-126

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal HTTP Client Manager allows Forceful Browsing.This issue affects HTTP Client Manager: from 0.0.0 before 9.3.13, from 10.0.0 before 10.0.2, from 11.0.0 before 11.0.1...

7.5CVSS5.9AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/01/28 8:03 p.m.•50 views

CVE-2025-14840 HTTP Client Manager - Less critical - Information disclosure - SA-CONTRIB-2025-126

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal HTTP Client Manager allows Forceful Browsing.This issue affects HTTP Client Manager: from 0.0.0 before 9.3.13, from 10.0.0 before 10.0.2, from 11.0.0 before 11.0.1...

0.00305EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/28 8:03 p.m.•10 views

CVE-2025-14840

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal HTTP Client Manager allows Forceful Browsing.This issue affects HTTP Client Manager: from 0.0.0 before 9.3.13, from 10.0.0 before 10.0.2, from 11.0.0 before 11.0.1...

5.9AI score0.00305EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/28 8:03 p.m.•8 views

CVE-2025-14840 HTTP Client Manager - Less critical - Information disclosure - SA-CONTRIB-2025-126

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal HTTP Client Manager allows Forceful Browsing.This issue affects HTTP Client Manager: from 0.0.0 before 9.3.13, from 10.0.0 before 10.0.2, from 11.0.0 before 11.0.1...

5.8AI score0.00305EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/28 8:03 p.m.•15 views

EUVD-2025-206433

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal HTTP Client Manager allows Forceful Browsing.This issue affects HTTP Client Manager: from 0.0.0 before 9.3.13, from 10.0.0 before 10.0.2, from 11.0.0 before 11.0.1...

7.5CVSS5.9AI score0.00305EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/28 8:03 p.m.•37 views

CVE-2025-14840

The Drupal HTTP Client Manager module is vulnerable to Forceful Browsing due to an improper check for unusual or exceptional conditions. This issue stems from an insufficient separation of data from request operations, which could lead to information disclosure in very uncommon situations. The vu...

7.5CVSS5.8AI score0.00305EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/01/28 8:02 p.m.•38 views

CVE-2025-13985 Entity Share - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-123

Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue affects Entity Share: from 0.0.0 before 3.13.0...

0.00217EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/28 8:02 p.m.•43 views

CVE-2025-13985

The Drupal Entity Share content sharing plugin is vulnerable to an Incorrect Authorization flaw, which allows for Forceful Browsing . This issue affects versions from 0.0.0 before 3.13.0 . The root cause is due to improper authorization, potentially permitting unauthorized access to resources. Th...

5.3CVSS5.8AI score0.00217EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/01/28 8:02 p.m.•9 views

CVE-2025-13985

Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue affects Entity Share: from 0.0.0 before 3.13.0...

5.9AI score0.00217EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/28 8:02 p.m.•18 views

EUVD-2025-206436

Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue affects Entity Share: from 0.0.0 before 3.13.0...

5.3CVSS5.9AI score0.00217EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/28 8:02 p.m.•7 views

CVE-2025-13985 Entity Share - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-123

Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue affects Entity Share: from 0.0.0 before 3.13.0...

5.8AI score0.00217EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•5 views

CVE-2025-14840: Improper Check for Unusual or Exceptional Conditions

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal HTTP Client Manager allows Forceful Browsing.This issue affects HTTP Client Manager: from 0.0.0 before 9.3.13, from 10.0.0 before 10.0.2, from 11.0.0 before 11.0.1...

7.5CVSS5.8AI score0.00305EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•3 views

CVE-2025-13985: Incorrect Authorization

Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue affects Entity Share: from 0.0.0 before 3.13.0...

5.3CVSS5.8AI score0.00217EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/28 12:00 a.m.•26 views

PT-2026-5207

Name of the Vulnerable Software and Affected Versions Drupal HTTP Client Manager versions prior to 9.3.13 Drupal HTTP Client Manager versions 10.0.0 through 10.0.2 Drupal HTTP Client Manager versions 11.0.0 through 11.0.1 Description An improper check for unusual or exceptional conditions exists ...

7.5CVSS5.4AI score0.00305EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/01/28 12:00 a.m.•29 views

PT-2026-5204

Name of the Vulnerable Software and Affected Versions Drupal Entity Share versions prior to 3.13.0 Description An authorization issue exists in Drupal Entity Share that permits forceful browsing. This flaw potentially allows unauthorized access to resources. Recommendations Update Drupal Entity...

5.3CVSS5.4AI score0.00217EPSS
SaveExploits0References5
NVD
NVD
•added 2025/12/19 12:15 p.m.•24 views

CVE-2025-1885

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Phishing, Forceful Browsing. This issue affects Online Food Delivery System: through 19122025. NOTE: The vendor was contacted early about this disclosure bu...

5.4CVSS0.00176EPSS
SaveExploits0References2
Rows per page
Query Builder