CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-96390 | MEDIUM | 4.3 | Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allo… |
T1068
T1134
|
|
2026-10-22 |
| CVE-2026-96388 | MEDIUM | 5.4 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Tawk.to - Live chat application allows Cro… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96386 | MEDIUM | 6.5 | Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing. This issue aff… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-96385 | MEDIUM | 6.5 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API Aut… |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-96382 | MEDIUM | 4.6 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96380 | MEDIUM | 6.5 | Missing Authorization vulnerability in Drupal CSS Usage Analyzer allows Forceful Browsing. This issu… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-96378 | MEDIUM | 4.3 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-96377 | MEDIUM | 5.3 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style al… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-96376 | MEDIUM | 6.4 | Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerabi… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96375 | MEDIUM | 4.8 | Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM).… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96374 | MEDIUM | 4.2 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96372 | MEDIUM | 5.4 | Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing.… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-96371 | MEDIUM | 5.4 | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96370 | MEDIUM | 5.4 | Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This iss… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96368 | MEDIUM | 4.6 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96367 | MEDIUM | 4.6 | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue … |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96366 | MEDIUM | 5.3 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-96364 | MEDIUM | 5.3 | Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misus… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96362 | MEDIUM | 4.2 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96361 | MEDIUM | 4.6 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |