166805 matches found
CVE-2026-16642 Email Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085
Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions:...
CVE-2026-16642 Email Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085
Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions:...
CVE-2026-16642
The Drupal Email Login OTP project is affected by CVE-2026-16642 , which involves improper input validation . This project has been marked as unsupported by the security team because a known security issue remains unfixed by the maintainer. No newer version containing a fix is currently available...
CVE-2026-16643 Lunr exposed filters - Critical - Unsupported - SA-CONTRIB-2026-086
Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions:...
CVE-2026-16643
A vulnerability exists in Drupal Lunr exposed filters (all versions) due to improper input validation within the exposed filters component. The security team has marked this project as unsupported because a known security issue remains unfixed by the maintainer. There is currently no information ...
CVE-2026-16643 Lunr exposed filters - Critical - Unsupported - SA-CONTRIB-2026-086
Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions:...
CVE-2026-15088 Development Environment - Critical - Unsupported - SA-CONTRIB-2026-089
Vulnerability in Drupal Development Environment. This issue affects Development Environment versions:...
CVE-2026-15088
A vulnerability exists in Drupal Development Environment (all versions). The software has been marked as unsupported by the security team due to a known security issue that remains unfixed by the maintainer . Rapid7 identifies the root cause as Improper Input Validation . No specific remediation ...
CVE-2026-15088 Development Environment - Critical - Unsupported - SA-CONTRIB-2026-089
Vulnerability in Drupal Development Environment. This issue affects Development Environment versions:...
CVE-2026-18260
The Drupal Disable Login Page module (versions 0.0.0 to 1.1.4 ) is vulnerable to a brute-force attack due to an improper restriction of excessive authentication attempts . The module allows users to disable access to the /user/login form unless a secret key is provided, but it fails to sufficient...
CVE-2026-18260 Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-110
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...
CVE-2026-18260 Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-110
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...
CVE-2026-18260 Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-110
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...
CVE-2026-18261
The Drupal Powerful Surveys module is affected by a vulnerability identified as CVE-2026-18261 . The project has been marked as unsupported by the security team due to a known security issue that has not been addressed by the maintainer. While Rapid7 identifies the root cause as Improper Input Va...
CVE-2026-18261 Powerful Surveys - Critical - Unsupported - SA-CONTRIB-2026-092
Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions:...
CVE-2026-18261 Powerful Surveys - Critical - Unsupported - SA-CONTRIB-2026-092
Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions:...
ROOT-OS-DEBIAN-12-CVE-2023-29934 CVE-2023-29934 in llvm-toolchain-14 - Patched by Root
Root has patched CVE-2023-29934 in the llvm-toolchain-14 package for Root:Debian:12. Multiple fixed versions available...
NPM: consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write
NPM: consciousness-explorer / sublinear-time-solver MCP exportstate has an arbitrary file write vulnerability discovered by ? in WordPress Npm sublinear-time-solver versions 1.6.0...