Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API...
CVE-2026-96385
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API Authentication for Drup
#advisory
共收录 22948 条相关情报。
← 返回所有主题Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing. This issue...
CVE-2026-96386
Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing. This issue affects Smart Content v
Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection")...
CVE-2026-96376
Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site...
CVE-2026-96374
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue
Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle ...
CVE-2026-96375
Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects
Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue...
CVE-2026-96373
Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in...
CVE-2026-96378
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerce Decouple
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style...
CVE-2026-96377
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Alloc
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows...
CVE-2026-96369
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This...
CVE-2026-96371
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This...
CVE-2026-96367
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers
Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful...
CVE-2026-96372
Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows...
CVE-2026-96365
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This i
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-96368
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This...
CVE-2026-96370
Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform v
Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue...
CVE-2026-96366
Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This...
CVE-2026-96363
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-96360
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all
Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality...
CVE-2026-96364
Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affect
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-96362
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all