Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (1101 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-87939 1 Drupal 1 Feed Block 2026-10-22 N/A
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Feed Block allows Stored XSS. This issue affects Feed Block versions: from 0.0.0 to 2.0.2, from 3.0.0 to 3.0.2.
CVE-2026-87938 1 Drupal 1 Csp Log 2026-10-22 N/A
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: from 0.0.0 to 1.0.2.
CVE-2026-87936 1 Drupal 1 Amazee.ai Private Ai Provider 2026-10-22 N/A
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affects amazee.ai Private AI Provider versions: from 0.0.0 to 1.3.7, from 1.4.0 to 1.4.3.
CVE-2026-84921 1 Drupal 1 Webform Submissions Delete 2026-10-22 N/A
Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects Webform Submissions Delete versions: from 0.0.0 to 1.2.0.
CVE-2026-81163 1 Drupal 1 Media Library Importer 2026-10-22 N/A
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Importer allows Path Traversal. This issue affects Media Library Importer versions: from 0.0.0 to 2.1.6.
CVE-2026-16648 1 Drupal 1 Mailer Plus Log 2026-10-22 N/A
Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Stolen Credentials. This issue affects Mailer Plus Log versions: from 0.0.0 to 1.2.7.
CVE-2026-84917 1 Drupal 1 Jsonapi Role Access 2026-10-22 N/A
Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2.
CVE-2026-84924 1 Drupal 1 Email Verification / Sms Verification / Otp Verification 2026-10-22 N/A
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Reflected XSS. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0.
CVE-2026-87937 1 Drupal 1 Central Authentication System (cas) Server 2026-10-22 N/A
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3.
CVE-2026-84919 1 Drupal 1 Photoswipe - Responsive Javascript Modal Image Gallery 2026-10-22 N/A
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Stored XSS. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 5.0.9.
CVE-2026-84916 1 Drupal 1 Islandora 2026-10-22 N/A
Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0.
CVE-2026-84920 1 Drupal 1 Unpublished Node Permissions 2026-10-22 N/A
Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affects Unpublished Node Permissions versions: from 0.0.0 to 1.8.0.
CVE-2012-1624 2 Drupal, Lingotek 2 Drupal, Ray Enterprise Translation 2026-10-20 N/A
Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when (1) creating or (2) editing page content.
CVE-2026-81164 2 Drupal, Entity Pdf Project 2 Entity Pdf, Entity Pdf 2026-10-07 5.4 Medium
Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5.
CVE-2026-76782 1 Drupal 1 Screenshot 2026-10-05 7.3 High
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.
CVE-2018-7602 2 Debian, Drupal 2 Debian Linux, Drupal 2026-10-01 8.1 High
A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.
CVE-2026-81158 2 Drupal, Entity Api Project 2 Entity Api, Entity Api 2026-10-01 5.3 Medium
Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1.8.0.
CVE-2026-81160 2 Drupal, Slick Carousel Project 2 Slick Carousel, Slick Carousel 2026-10-01 6.1 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Slick Carousel allows Stored XSS. This issue affects Slick Carousel versions: from 0.0.0 to 2.1.0.
CVE-2026-15917 1 Drupal 1 Drupal Core 2026-09-28 4.7 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.2.*.
CVE-2026-81161 2 Content Moderation Notifications Project, Drupal 2 Content Moderation Notifications, Content Moderation Notifications 2026-09-24 3.3 Low
Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalation. This issue affects Content Moderation Notifications versions: from 0.0.0 to 3.9.0.