CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-96392 | LOW | 3.5 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKE… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96387 | LOW | 3.8 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop administrator … |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-96384 | LOW | 3.5 | Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-96373 | LOW | 3.3 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-96369 | LOW | 3.1 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exp… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96360 | LOW | 3.5 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-87953 | LOW | 3.3 | Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Serve… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-87952 | LOW | 3.1 | Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows … |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-87951 | LOW | 3.8 | Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allow… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-87949 | LOW | 3.3 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-87948 | LOW | 3.5 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-84918 | LOW | 3.7 | Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-84916 | LOW | 3.7 | Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affect… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-84911 | LOW | 3.1 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-16648 | LOW | 3.8 | Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remo… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114723 | LOW | 3.7 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be … |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114721 | LOW | 3.1 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration set… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114719 | LOW | 3.7 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in th… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114641 | LOW | 3.7 | Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114576 | LOW | 3.7 | A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the… |
T1190
T1203
|
|
2026-10-22 |