Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (1029 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-73474 2 Drupal, Entity Share Websub Project 2 Entity Share, Entity Share Websub 2026-09-09 5.3 Medium
Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This issue affects Entity Share Websub versions: from 0.0.0 to 1.1.2.
CVE-2026-73475 2 Centarro, Drupal 2 Commerce Paypal, Commerce Paypal 2026-09-08 9.1 Critical
Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3.
CVE-2026-18986 2 Drupal, Entity Browser Project 2 Entity Browser, Entity Browser 2026-09-08 4.8 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Entity Browser allows Stored XSS. This issue affects Entity Browser versions: from 0.0.0 to 2.16.0.
CVE-2026-16647 2 Drupal, Zyxware 2 Disable Login Page, Disable Login Page 2026-09-08 4.1 Medium
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4.
CVE-2026-81164 1 Drupal 1 Entity Pdf 2026-09-02 5.4 Medium
Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5.
CVE-2026-81269 1 Drupal 1 Data Field 2026-09-02 5.3 Medium
Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.
CVE-2026-76759 1 Drupal 1 Screenshot 2026-09-02 7.3 High
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.
CVE-2026-76758 1 Drupal 1 Link Content Parser 2026-09-02 5.9 Medium
Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: *.*.
CVE-2026-18260 1 Drupal 1 Disable Login Page 2026-09-02 5.7 Medium
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4.
CVE-2026-18985 1 Drupal 1 Edit In-place Field 2026-08-28 8.1 High
Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in-place field versions: from 0.0.0 to 2.1.1.
CVE-2026-18261 1 Drupal 1 Powerful Surveys 2026-08-28 5.7 Medium
Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*.
CVE-2026-18259 1 Drupal 1 Token Content Access 2026-08-28 7.5 High
Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2.
CVE-2026-15088 1 Drupal 1 Development Environment 2026-08-28 5.7 Medium
Vulnerability in Drupal Development Environment. This issue affects Development Environment versions: *.*.
CVE-2026-16645 1 Drupal 1 Photoswipe - Responsive Javascript Modal Image Gallery 2026-08-28 9.1 Critical
Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 3.2.0.
CVE-2026-16643 1 Drupal 1 Lunr Exposed Filters 2026-08-28 5.7 Medium
Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*.
CVE-2026-16642 1 Drupal 1 Email Login Otp 2026-08-28 5.7 Medium
Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.
CVE-2026-16640 1 Drupal 1 Search Api Autocomplete 2026-08-28 6.1 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0.
CVE-2026-16639 1 Drupal 1 Internationalization Single Sign-on 2026-08-28 9.8 Critical
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0.
CVE-2026-16638 1 Drupal 1 Media Folders 2026-08-28 6.1 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders versions: from 0.0.0 to 1.0.8.
CVE-2026-55805 1 Drupal 1 Drupal Core 2026-08-26 5.4 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Stored XSS. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*, from 0.0.0 to 11.2.*.