CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-107307 | MEDIUM | 4.3 | Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107306 | LOW | 3.8 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107268 | MEDIUM | 4.3 | Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107267 | MEDIUM | 5.3 | Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue affects DKAN… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107266 | NONE | — | Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affec… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107265 | MEDIUM | 5.4 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107264 | MEDIUM | 5.4 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107263 | MEDIUM | 5.4 | Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affec… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107262 | MEDIUM | 5.3 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Filesystem allows Cross Site Requ… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107261 | MEDIUM | 4.2 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-107260 | NONE | — | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107259 | MEDIUM | 5.4 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107258 | MEDIUM | 5.4 | Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107257 | MEDIUM | 6.5 | Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affec… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107256 | NONE | — | Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield allows Brut… |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107255 | NONE | — | Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This … |
T1190
T1059
+1
|
|
2026-10-30 |
| CVE-2026-107254 | MEDIUM | 4.8 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login… |
T1078
T1548
|
|
2026-10-30 |
| CVE-2026-107253 | MEDIUM | 5.9 | Vulnerability in Drupal Orphans Media. This issue affects Orphans Media versions: *.*. |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107252 | MEDIUM | 5.4 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-30 |
| CVE-2026-107251 | MEDIUM | 6.5 | Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows For… |
T1190
T1059
+1
|
|
2026-10-30 |