CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-84920 | MEDIUM | 5.3 | Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsin… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-84919 | MEDIUM | 4.6 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-84917 | MEDIUM | 6.5 | Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This … |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-84915 | MEDIUM | 4.6 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-84914 | MEDIUM | 5.3 | Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This … |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-84913 | MEDIUM | 4.6 | Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affe… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-84912 | MEDIUM | 4.6 | Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-84910 | MEDIUM | 4.2 | Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue a… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-81163 | MEDIUM | 5.4 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drup… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114728 | MEDIUM | 5.3 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypa… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114726 | MEDIUM | 5.8 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulner… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114725 | MEDIUM | 5.0 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulner… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114722 | MEDIUM | 6.5 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML m… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114718 | MEDIUM | 4.7 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnera… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114717 | MEDIUM | 4.0 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulner… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114715 | MEDIUM | 6.8 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vul… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114660 | MEDIUM | 6.3 | Grav from 2.0.0 before 2.2.5 contains an improper access control vulnerability in FlexDirectory::dyn… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114659 | MEDIUM | 6.5 | Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic /a… |
T1190
T1059
+1
|
|
2026-10-22 |
| CVE-2026-114657 | MEDIUM | 5.7 | Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows page autho… |
T1190
T1203
|
|
2026-10-22 |
| CVE-2026-114634 | MEDIUM | 4.3 | WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderCon… |
T1190
T1203
|
|
2026-10-22 |