amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134
CVE-2026-87936
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai P
#advisory
共收录 22948 条相关情报。
← 返回所有主题Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135
CVE-2026-87937
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server a
CSP log - Critical - SQL Injection - SA-CONTRIB-2026-136
CVE-2026-87938
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log all
Feed Block - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-137
CVE-2026-87939
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Feed Block
Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138
CVE-2026-87940
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly
SafeDelete - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-140
CVE-2026-87942
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SafeDelete
SAML SSO - Service Provider - Critical - Improper access control - SA-CONTRIB-2026-141
CVE-2026-87943
Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing. This issue affects
SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142
CVE-2026-87944
Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle (AiT
SAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143
CVE-2026-87945
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the
SAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144
CVE-2026-87946
Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affect
SAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145
CVE-2026-87947
Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider allows Signature S
SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146
CVE-2026-87948
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO -
SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147
CVE-2026-87949
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO -
SAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148
CVE-2026-87950
Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Da
SAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149
CVE-2026-87951
Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded
SAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150
CVE-2026-87952
Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with
SAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151
CVE-2026-87953
Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forge
Taxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152
CVE-2026-87954
Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxono
Ultimate Table Field - Critical - Access bypass - SA-CONTRIB-2026-153
CVE-2026-87955
Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This issue affects Ultimate
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-154
CVE-2026-96360
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all