CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118583 | NONE | — | Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This iss… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118582 | NONE | — | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Func… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-118576 | NONE | — | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118575 | NONE | — | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118574 | NONE | — | Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118573 | NONE | — | Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing. This is… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118572 | NONE | — | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-118571 | NONE | — | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Displa… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118570 | NONE | — | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Fasttoggle allows Cross Site Request Forge… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118569 | NONE | — | Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affe… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118568 | NONE | — | Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) all… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118567 | NONE | — | Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful Browsing. Thi… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118565 | NONE | — | Vulnerability in Drupal GroupEx PRO ( Daxko ) integration. This issue affects GroupEx PRO ( Daxko )… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118564 | NONE | — | Vulnerability in Drupal PayUmoney for Drupal Commerce. This issue affects PayUmoney for Drupal Comme… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118563 | NONE | — | Vulnerability in Drupal CacheFlush. This issue affects CacheFlush versions: *.*. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118562 | NONE | — | Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injectio… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118561 | NONE | — | External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traver… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118560 | NONE | — | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118559 | NONE | — | Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Sign… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118558 | NONE | — | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Stripe allows Cross Site Request … |
T1190
T1059
+1
|
|
2026-10-30 |