Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (1029 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-81167 2 Address Suggestion Project, Drupal 2 Address Suggestion, Address Suggestion 2026-09-09 4.8 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Address Suggestion allows Cross-Site Scripting (XSS). This issue affects Address Suggestion versions: from 0.0.0 to 1.0.25.
CVE-2026-81162 2 Drupal, Dxpr Builder Project 2 Dxpr Builder: The Best Editing (ai) Experience For Drupal, Dxpr Builder 2026-09-09 5.3 Medium
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience for Drupal allows Forceful Browsing. This issue affects DXPR Builder: The Best Editing (AI) Experience for Drupal versions: from 0.0.0 to 2.8.1.
CVE-2026-81269 2 Data Field Project, Drupal 2 Data Field, Data Field 2026-09-09 5.3 Medium
Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.
CVE-2026-73474 2 Drupal, Entity Share Websub Project 2 Entity Share, Entity Share Websub 2026-09-09 5.3 Medium
Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This issue affects Entity Share Websub versions: from 0.0.0 to 1.1.2.
CVE-2026-73475 2 Centarro, Drupal 2 Commerce Paypal, Commerce Paypal 2026-09-08 9.1 Critical
Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3.
CVE-2026-18986 2 Drupal, Entity Browser Project 2 Entity Browser, Entity Browser 2026-09-08 4.8 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Entity Browser allows Stored XSS. This issue affects Entity Browser versions: from 0.0.0 to 2.16.0.
CVE-2026-16647 2 Drupal, Zyxware 2 Disable Login Page, Disable Login Page 2026-09-08 4.1 Medium
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4.
CVE-2026-76759 1 Drupal 1 Screenshot 2026-09-02 7.3 High
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.
CVE-2026-76758 1 Drupal 1 Link Content Parser 2026-09-02 5.9 Medium
Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: *.*.
CVE-2026-18260 1 Drupal 1 Disable Login Page 2026-09-02 5.7 Medium
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4.
CVE-2026-18985 1 Drupal 1 Edit In-place Field 2026-08-28 8.1 High
Incorrect Authorization vulnerability in Drupal Edit in-place field allows Forceful Browsing. This issue affects Edit in-place field versions: from 0.0.0 to 2.1.1.
CVE-2026-18261 1 Drupal 1 Powerful Surveys 2026-08-28 5.7 Medium
Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*.
CVE-2026-18259 1 Drupal 1 Token Content Access 2026-08-28 7.5 High
Observable Timing Discrepancy vulnerability in Drupal Token Content Access allows Brute Force. This issue affects Token Content Access versions: from 0.0.0 to 3.1.2.
CVE-2026-15088 1 Drupal 1 Development Environment 2026-08-28 5.7 Medium
Vulnerability in Drupal Development Environment. This issue affects Development Environment versions: *.*.
CVE-2026-16645 1 Drupal 1 Photoswipe - Responsive Javascript Modal Image Gallery 2026-08-28 9.1 Critical
Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 3.2.0.
CVE-2026-16643 1 Drupal 1 Lunr Exposed Filters 2026-08-28 5.7 Medium
Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*.
CVE-2026-16642 1 Drupal 1 Email Login Otp 2026-08-28 5.7 Medium
Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.
CVE-2026-16640 1 Drupal 1 Search Api Autocomplete 2026-08-28 6.1 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Search API Autocomplete allows Reflected XSS. This issue affects Search API Autocomplete versions: from 0.0.0 to 1.12.0.
CVE-2026-16639 1 Drupal 1 Internationalization Single Sign-on 2026-08-28 9.8 Critical
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0.
CVE-2026-16638 1 Drupal 1 Media Folders 2026-08-28 6.1 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Media Folders allows Stored XSS. This issue affects Media Folders versions: from 0.0.0 to 1.0.8.