Export limit exceeded: 413156 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (413156 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-53986 | 1 Girafit | 1 Girafit Camera App | 2026-10-22 | 5.3 Medium |
| Girafit camera app (Android and iOS) version 1.9.1 and earlier, and Girafit camera devices, contain a hardcoded credentials vulnerability that allows attackers to obtain the shared TURN relay username by decompiling the app or intercepting unencrypted network traffic during live view registration. Attackers can extract the static TURN username and session token, which are identical across all installs and not tied to any user or device, potentially enabling tracking, impersonation, or further exploitation if combined with the TURN relay password. | ||||
| CVE-2026-96382 | 1 Drupal | 1 Diba Carousel Slider | 2026-10-22 | N/A |
| Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Diba carousel slider allows Stored XSS. This issue affects Diba carousel slider versions: from 0.0.0 to 3.0.2. | ||||
| CVE-2026-96386 | 1 Drupal | 1 Smart Content | 2026-10-22 | N/A |
| Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing. This issue affects Smart Content versions: from 0.0.0 to 3.2.1. | ||||
| CVE-2026-96380 | 1 Drupal | 1 Css Usage Analyzer | 2026-10-22 | N/A |
| Missing Authorization vulnerability in Drupal CSS Usage Analyzer allows Forceful Browsing. This issue affects CSS Usage Analyzer versions: from 1.0.0 to 1.0.2. | ||||
| CVE-2026-96377 | 1 Drupal | 1 Combined Image Style | 2026-10-22 | N/A |
| Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Allocation. This issue affects Combined image style versions: from 0.0.0 to 1.0.7. | ||||
| CVE-2026-96390 | 1 Drupal | 1 Editoria11y Accessibility Checker | 2026-10-22 | N/A |
| Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allows Privilege Escalation. This issue affects Editoria11y Accessibility Checker versions: from 0.0.0 to 2.2.23, from 3.0.0 to 3.0.9. | ||||
| CVE-2026-96388 | 1 Drupal | 1 Tawk.to - Live Chat Application | 2026-10-22 | N/A |
| Cross-Site Request Forgery (CSRF) vulnerability in Drupal Tawk.to - Live chat application allows Cross Site Request Forgery. This issue affects Tawk.to - Live chat application versions: from 0.0.0 to 3.0.4. | ||||
| CVE-2026-96387 | 1 Drupal | 1 Stop Administrator Login | 2026-10-22 | N/A |
| Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop administrator login allows Authentication Bypass. This issue affects Stop administrator login versions: from 1.0 to 1.6. | ||||
| CVE-2026-96385 | 1 Drupal | 1 Rest & Json Api Authentication For Drupal | 2026-10-22 | N/A |
| Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API Authentication for Drupal allows Authentication Bypass. This issue affects REST & JSON API Authentication for Drupal versions: from 0.0.0 to 3.2.0. | ||||
| CVE-2026-96379 | 1 Drupal | 1 Cookiecuttr | 2026-10-22 | N/A |
| Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: from 2.0.0 to 2.0.3. | ||||
| CVE-2026-96384 | 1 Drupal | 1 Mermaid Diagram Field | 2026-10-22 | N/A |
| Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9. | ||||
| CVE-2026-96378 | 1 Drupal | 1 Commerce Decoupled Checkout | 2026-10-22 | N/A |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerce Decoupled Checkout allows Object Injection. This issue affects Commerce Decoupled Checkout versions: from 1.0.0 to 1.8.0. | ||||
| CVE-2026-21812 | 2026-10-22 | 2.2 Low | ||
| HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been updated to display a warning when HTTP is used and recommend HTTPS for secure communication. | ||||
| CVE-2026-96374 | 1 Drupal | 1 Project Browser | 2026-10-22 | N/A |
| Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue affects Project Browser versions: from 0.0.0 to 2.0.3, from 2.1.0 to 2.1.5. | ||||
| CVE-2026-96376 | 1 Drupal | 1 Cloud | 2026-10-22 | N/A |
| Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud versions: from 0.0.0 to 7.0.1. | ||||
| CVE-2026-96375 | 1 Drupal | 1 Cloud | 2026-10-22 | N/A |
| Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects Cloud versions: from 0.0.0 to 7.0.1. | ||||
| CVE-2026-87955 | 1 Drupal | 1 Ultimate Table Field | 2026-10-22 | N/A |
| Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This issue affects Ultimate Table Field versions: from 0.0.0 to 1.1.1, from 2.0.0 to 2.0.1. | ||||
| CVE-2026-87954 | 1 Drupal | 1 Taxonomy Term Glossary | 2026-10-22 | N/A |
| Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxonomy Term Glossary versions: from 0.0.0 to 4.6.0. | ||||
| CVE-2026-87942 | 1 Drupal | 1 Safedelete | 2026-10-22 | N/A |
| Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SafeDelete allows Stored XSS. This issue affects SafeDelete versions: from 0.0.0 to 1.0.88. | ||||
| CVE-2026-87941 | 1 Drupal | 1 Patreon | 2026-10-22 | N/A |
| Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x. | ||||