Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email...
CVE-2026-84923
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification /
2026-10-22 归档
今日共收录 1761 条安全情报，包含 937 个 CVE，415 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x.
CVE-2026-87941
Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x.
Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API...
CVE-2026-84918
Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. Th
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-84919
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-87938
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log all
Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful...
CVE-2026-84920
Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affect
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-87939
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Feed Block
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-84924
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Email Verif
Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing....
CVE-2026-84917
Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonap
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central...
CVE-2026-87937
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server a
Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing...
CVE-2026-84921
Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects We
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-87936
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai P
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-84915
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Component b
Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing....
CVE-2026-84914
Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calcul
Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue...
CVE-2026-84913
Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate ver
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-84911
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific
Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This...
CVE-2026-84910
Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Sear
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful...
CVE-2026-84912
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects
Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue...
CVE-2026-84916
Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora version
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in...
CVE-2026-114724
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserial