#advisory

共收录 22948 条相关情报。

← 返回所有主题
安全公告2026-10-22 发布INFO

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows...

CVE-2026-87940

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email...

CVE-2026-84923

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification /

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x.

CVE-2026-87941

Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API...

CVE-2026-84918

Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. Th

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...

CVE-2026-84919

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-87938

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful...

CVE-2026-84920

Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affect

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...

CVE-2026-87939

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Feed Block

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...

CVE-2026-84924

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Email Verif

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing....

CVE-2026-84917

Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonap

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central...

CVE-2026-87937

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing...

CVE-2026-84921

Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects We

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

CVE-2026-87936

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai P

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...

CVE-2026-84915

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Component b

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing....

CVE-2026-84914

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calcul

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue...

CVE-2026-84913

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate ver

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...

CVE-2026-84911

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This...

CVE-2026-84910

Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Sear

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful...

CVE-2026-84912

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue...

CVE-2026-84916

Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora version

历史摘要 · 未重新核验 · GitHub Advisory