CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-107310 | MEDIUM | 4.3 | Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side Request Fo… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107307 | MEDIUM | 4.3 | Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107268 | MEDIUM | 4.3 | Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107267 | MEDIUM | 5.3 | Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue affects DKAN… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107265 | MEDIUM | 5.4 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107264 | MEDIUM | 5.4 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107263 | MEDIUM | 5.4 | Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affec… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107262 | MEDIUM | 5.3 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Filesystem allows Cross Site Requ… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107261 | MEDIUM | 4.2 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-107259 | MEDIUM | 5.4 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107258 | MEDIUM | 5.4 | Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107257 | MEDIUM | 6.5 | Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affec… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107254 | MEDIUM | 4.8 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-107253 | MEDIUM | 5.9 | Vulnerability in Drupal Orphans Media. This issue affects Orphans Media versions: *.*. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107252 | MEDIUM | 5.4 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107251 | MEDIUM | 6.5 | Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows For… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107250 | MEDIUM | 5.9 | Vulnerability in Drupal ECA Helper. This issue affects ECA Helper versions: *.*. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-91920 | MEDIUM | 6.5 | A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle ch… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-76027 | MEDIUM | 4.3 | Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-76024 | MEDIUM | 6.5 | Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker t… |
T1190
T1059
+1
|
|
2026-10-30 |