CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118557 | NONE | — | Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This iss… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118556 | NONE | — | Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This iss… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118555 | NONE | — | Incorrect Authorization vulnerability in Drupal Commerce License allows Forceful Browsing. This issu… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118554 | NONE | — | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Clie… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-118553 | NONE | — | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118552 | NONE | — | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118551 | NONE | — | Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allow… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118550 | NONE | — | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Int… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118549 | NONE | — | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118548 | NONE | — | Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injecti… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118546 | NONE | — | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118545 | NONE | — | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-118544 | NONE | — | Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Core allows … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118543 | NONE | — | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Core allows Cross Site Request Fo… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118542 | NONE | — | Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue a… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118541 | NONE | — | Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue a… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118540 | NONE | — | Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue a… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-118539 | MEDIUM | 6.5 | Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue aff… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-114573 | NONE | — | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-114572 | MEDIUM | 5.4 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restri… |
T1078
T1548
|
|
2026-10-30 |