Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (892 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-107266 1 Drupal 1 Views Share 2026-11-06 5.3 Medium
Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1.
CVE-2026-107260 1 Drupal 1 Sector Distribution 2026-11-06 6.5 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Sector Distribution allows Stored XSS. This issue affects Sector Distribution versions: from 0.0.0 to 10.3.3, from 10.4.0 to 10.4.2.
CVE-2026-107255 1 Drupal 1 Restrict Route By Ip 2026-11-06 7.3 High
Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 to 2.0.1.
CVE-2026-118565 1 Drupal 1 Groupex Pro ( Daxko ) Integration 2026-11-06 7.2 High
Vulnerability in Drupal GroupEx PRO ( Daxko ) integration. This issue affects GroupEx PRO ( Daxko ) integration versions: *.*.
CVE-2026-118564 1 Drupal 1 Payumoney For Drupal Commerce 2026-11-06 6.6 Medium
Vulnerability in Drupal PayUmoney for Drupal Commerce. This issue affects PayUmoney for Drupal Commerce versions: *.*.
CVE-2026-114553 1 Drupal 1 Frontend Editing 2026-11-06 5.4 Medium
Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.
CVE-2026-114548 1 Drupal 1 Imageapi Optimize Webp 2026-11-06 3.7 Low
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ImageAPI Optimize WebP versions: from 0.0.0 to 2.1.2.
CVE-2026-114547 1 Drupal 1 Tinypng 2026-11-06 3.7 Low
Missing Authorization vulnerability in Drupal TinyPNG allows Forceful Browsing. This issue affects TinyPNG versions: from 0.0.0 to 2.0.2.
CVE-2026-114546 1 Drupal 1 Media Alias Display 2026-11-06 3.7 Low
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2.
CVE-2026-114545 1 Drupal 1 Fullcalendar View 2026-11-06 5.4 Medium
Incorrect Authorization vulnerability in Drupal Fullcalendar View allows Forceful Browsing. This issue affects Fullcalendar View versions: from 0.0.0 to 5.2.6.
CVE-2026-114544 1 Drupal 1 Media Bulk Upload 2026-11-06 5.4 Medium
Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful Browsing. This issue affects Media Bulk Upload versions: from 0.0.0 to 3.0.6.
CVE-2026-114541 1 Drupal 1 Frontend Editing 2026-11-06 4.8 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.
CVE-2026-114540 1 Drupal 1 Domain 2026-11-06 6.3 Medium
Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing. This issue affects Domain versions: from 3.0.0 to 3.0.2.
CVE-2026-114539 1 Drupal 1 Doccheck Basic 2026-11-06 6.3 Medium
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic allows Authentication Bypass. This issue affects DocCheck Basic versions: 7.x.
CVE-2026-114538 1 Drupal 1 Bootstrap 2026-11-06 7.1 High
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Bootstrap allows Cross-Site Scripting (XSS). This issue affects Bootstrap versions: from 0.0.0 to 3.45.0.
CVE-2026-114537 1 Drupal 1 View Unpublished 2026-11-06 5.3 Medium
Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing. This issue affects View Unpublished versions: from 0.0.0 to 1.5.0.
CVE-2026-118582 1 Drupal 1 Captcha 2026-11-06 7.3 High
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass. This issue affects CAPTCHA versions: from 0.0.0 to 1.18.0, from 2.0.0 to 2.0.11.
CVE-2026-118574 1 Drupal 1 S3 File System 2026-11-06 5.6 Medium
Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects S3 File System versions: from 0.0.0 to 3.12.0.
CVE-2026-118570 1 Drupal 1 Fasttoggle 2026-11-06 6.5 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1.
CVE-2026-118569 1 Drupal 1 Fasttoggle 2026-11-06 5.4 Medium
Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versions: from 0.0.0 to 4.1.1.