#CVE

共收录 65074 条相关情报。

漏洞预警2026-10-22 发布INFO

Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affects Unpublished Node Permissions versions: from 0.0.0 to 1....

CVE-2026-84920

Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affect

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Stored...

CVE-2026-84919

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布INFO

Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment API versions: from 0.0....

CVE-2026-84918

Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. Th

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-10-22 发布INFO

Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2.

CVE-2026-84917

Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonap

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0.

CVE-2026-84916

Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora version

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blo...

CVE-2026-84915

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Component b

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3.

CVE-2026-84914

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calcul

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1.

CVE-2026-84913

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate ver

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.3....

CVE-2026-84912

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Stored XSS. This issue affects A...

CVE-2026-84911

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-10-22 发布INFO

Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Search versions: from 0.0.0 to 2.4.5.

CVE-2026-84910

Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Sear

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-10-22 发布INFO

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Importer allows Path Traversal. This issue affects Media Lib...

CVE-2026-81163

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Imp

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-10-22 发布INFO

Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Stolen Credentials. This issue affects Mailer Plus Log versi...

CVE-2026-16648

Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Sto

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-10-22 发布MEDIUM

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes. rcube_washtml detected the CSS url(...

CVE-2026-114728

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling o

来源摘录 · NVD

#cve #cwe-184

漏洞预警2026-10-22 发布HIGH

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing images. SVG and EPS were accepted as valid image types fo...

CVE-2026-114727

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing

来源摘录 · NVD

#cve #cwe-829

漏洞预警2026-10-22 发布MEDIUM

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce (resend) action. rcube_mime::decode_address_list() did ...

CVE-2026-114726

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounc

来源摘录 · NVD

#cve #cwe-99

漏洞预警2026-10-22 发布MEDIUM

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail stripped newline characters only from the Subject an...

CVE-2026-114725

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send

来源摘录 · NVD

#cve #cwe-99

漏洞预警2026-10-22 发布HIGH

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserialize(). A session key prefixed with “!” was treated as hav...

CVE-2026-114724

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserial

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-22 发布MEDIUM

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcube_image falls back to GD, the ...

CVE-2026-114723

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thum

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-22 发布MEDIUM

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils::mod_css_styles() did not treat an at-rule prologue such...

CVE-2026-114722

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils

来源摘录 · NVD

#cve #cwe-669