Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (1101 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-96382 1 Drupal 1 Diba Carousel Slider 2026-10-22 4.6 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Diba carousel slider allows Stored XSS. This issue affects Diba carousel slider versions: from 0.0.0 to 3.0.2.
CVE-2026-96380 1 Drupal 1 Css Usage Analyzer 2026-10-22 5.4 Medium
Missing Authorization vulnerability in Drupal CSS Usage Analyzer allows Forceful Browsing. This issue affects CSS Usage Analyzer versions: from 1.0.0 to 1.0.2.
CVE-2026-96377 1 Drupal 1 Combined Image Style 2026-10-22 4.3 Medium
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Allocation. This issue affects Combined image style versions: from 0.0.0 to 1.0.7.
CVE-2026-84913 1 Drupal 1 Ai Translate 2026-10-22 4.6 Medium
Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1.
CVE-2026-84912 1 Drupal 1 Artificial Intelligence 2026-10-22 4.6 Medium
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8.
CVE-2026-84911 1 Drupal 1 Artificial Intelligence 2026-10-22 3.1 Low
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Stored XSS. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8.
CVE-2026-84910 1 Drupal 1 Advanced Search 2026-10-22 4.2 Medium
Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Search versions: from 0.0.0 to 2.4.5.
CVE-2026-96391 1 Drupal 1 Webform 2026-10-22 N/A
Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1.
CVE-2026-96363 1 Drupal 1 Webform 2026-10-22 N/A
Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.
CVE-2026-96379 1 Drupal 1 Cookiecuttr 2026-10-22 N/A
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3.
CVE-2026-87941 1 Drupal 1 Patreon 2026-10-22 N/A
Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x.
CVE-2026-87938 1 Drupal 1 Csp Log 2026-10-22 N/A
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: from 0.0.0 to 1.0.2.
CVE-2012-1624 2 Drupal, Lingotek 2 Drupal, Ray Enterprise Translation 2026-10-20 N/A
Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when (1) creating or (2) editing page content.
CVE-2026-81164 2 Drupal, Entity Pdf Project 2 Entity Pdf, Entity Pdf 2026-10-07 5.4 Medium
Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1.5.
CVE-2026-76782 1 Drupal 1 Screenshot 2026-10-05 7.3 High
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.
CVE-2018-7602 2 Debian, Drupal 2 Debian Linux, Drupal 2026-10-01 8.1 High
A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.
CVE-2026-81158 2 Drupal, Entity Api Project 2 Entity Api, Entity Api 2026-10-01 5.3 Medium
Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1.8.0.
CVE-2026-81160 2 Drupal, Slick Carousel Project 2 Slick Carousel, Slick Carousel 2026-10-01 6.1 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Slick Carousel allows Stored XSS. This issue affects Slick Carousel versions: from 0.0.0 to 2.1.0.
CVE-2026-15917 1 Drupal 1 Drupal Core 2026-09-28 4.7 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.2.*.
CVE-2026-81161 2 Content Moderation Notifications Project, Drupal 2 Content Moderation Notifications, Content Moderation Notifications 2026-09-24 3.3 Low
Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalation. This issue affects Content Moderation Notifications versions: from 0.0.0 to 3.9.0.