CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-96359 | MEDIUM | 4.6 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96358 | MEDIUM | 4.6 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96357 | MEDIUM | 4.6 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-96356 | MEDIUM | 5.3 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-87955 | MEDIUM | 4.3 | Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This is… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-87954 | MEDIUM | 4.3 | Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This … |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-87950 | MEDIUM | 5.3 | Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve E… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-87947 | MEDIUM | 4.8 | Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-87946 | MEDIUM | 4.8 | Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Forc… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-87945 | MEDIUM | 5.4 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provi… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-87944 | MEDIUM | 4.8 | Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversar… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-87943 | MEDIUM | 6.5 | Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing.… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-87942 | MEDIUM | 4.6 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-87940 | MEDIUM | 5.4 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Ex… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-87939 | MEDIUM | 4.2 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-87937 | MEDIUM | 6.5 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication S… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-87936 | MEDIUM | 6.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-22 |
| CVE-2026-84924 | MEDIUM | 5.4 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-84923 | MEDIUM | 6.5 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification … |
T1078
T1548
|
|
2026-10-22 |
| CVE-2026-84921 | MEDIUM | 5.3 | Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. T… |
T1190
T1059
+1
|
|
2026-10-22 |