Missing Authorization vulnerability in Drupal WissKI allows Forceful Browsing. This issue affects...
CVE-2026-13239
Missing Authorization vulnerability in Drupal WissKI allows Forceful Browsing. This issue affects WissKI versions: from
2026-07-11 归档
今日共收录 1315 条安全情报，包含 488 个 CVE，410 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in...
CVE-2026-13244
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Tealium iQ Tag Ma
Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue...
CVE-2026-13237
Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents version
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Salesforce Suite allows Cross Site...
CVE-2026-13243
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Salesforce Suite allows Cross Site Request Forgery. This issue
Incorrect Authorization vulnerability in Drupal Commerce Realex / Global Payments allows Forceful...
CVE-2026-13238
Incorrect Authorization vulnerability in Drupal Commerce Realex / Global Payments allows Forceful Browsing. This issue a
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-10769
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Co
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in...
CVE-2026-12535
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Formatter Field a
Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing....
CVE-2026-11909
Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing. This issue affects Examp
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-13234
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific
Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful Browsing. This...
CVE-2026-10768
Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful Browsing. This issue affects LocalGov W
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-13231
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Advanced Co
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-10770
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Anti-Spam b
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-11908
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allo
Incorrect Authorization vulnerability in Drupal Advanced Content Feedback (aka admin_feedback)...
CVE-2026-13232
Incorrect Authorization vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allows Forceful Browsing.
Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side...
CVE-2026-13233
Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issu
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful...
CVE-2026-13235
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects
melange: Incomplete package integrity verification allows data section substitution
CVE-2026-54174
Previously, Apko verified the control section hash (`.PKGINFO` etc.) against the signed `APKINDEX`, but never verified t
The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for...
CVE-2026-13039
The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to a
Kernel software installed and running inside a Host VM may post improper commands to the GPU...
CVE-2026-45203
Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memor
Software installed and run as a non-privileged user may conduct a sequence of improper GPU system...
CVE-2026-7639
Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use afte