#CVE

共收录 65074 条相关情报。

漏洞预警2026-10-22 发布INFO

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

CVE-2026-96371

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers

历史摘要 · 未重新核验 · NVD

#cve #cwe-267

漏洞预警2026-10-22 发布INFO

Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

CVE-2026-96370

Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform v

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-22 发布INFO

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue aff...

CVE-2026-96369

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly

历史摘要 · 未重新核验 · NVD

#cve #cwe-525

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from...

CVE-2026-96368

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布INFO

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

CVE-2026-96367

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers

历史摘要 · 未重新核验 · NVD

#cve #cwe-267

漏洞预警2026-10-22 发布INFO

Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

CVE-2026-96366

Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-22 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This issue affects Webform versions: from 0.0.0 to 6.2.12, from...

CVE-2026-96365

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This i

历史摘要 · 未重新核验 · NVD

#cve #cwe-770

漏洞预警2026-10-22 发布INFO

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6...

CVE-2026-96364

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affect

历史摘要 · 未重新核验 · NVD

#cve #cwe-799

漏洞预警2026-10-22 发布LOW

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

CVE-2026-96363

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers

来源摘录 · NVD

#cve #cwe-267

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webfor...

CVE-2026-96362

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webfor...

CVE-2026-96361

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webfor...

CVE-2026-96360

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webfor...

CVE-2026-96359

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webfor...

CVE-2026-96358

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from...

CVE-2026-96357

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布INFO

Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

CVE-2026-96356

Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Injection. This issue affects Webform versions: from 0.0.0 to 6...

CVE-2026-96355

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Inject

历史摘要 · 未重新核验 · NVD

#cve #cwe-1336

漏洞预警2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This issue affects Ultimate Table Field versions: from 0.0.0 to 1.1.1, from 2.0.0 to...

CVE-2026-87955

Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This issue affects Ultimate

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxonomy Term Glossary versions: from 0.0.0 to 4.6.0.

CVE-2026-87954

Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxono

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-22 发布INFO

Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forgery. This issue affects SAML SSO - Service Provider versi...

CVE-2026-87953

Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forge

历史摘要 · 未重新核验 · NVD

#cve #cwe-918