Search

Expected end of text, found ':' (at char 35), (line:1, col:36)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (385933 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-81165 1 Drupal 1 Blazy 2026-09-02 5.3 Medium
Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18.
CVE-2026-81162 1 Drupal 1 Dxpr Builder: The Best Editing (ai) Experience For Drupal 2026-09-02 5.3 Medium
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience for Drupal allows Forceful Browsing. This issue affects DXPR Builder: The Best Editing (AI) Experience for Drupal versions: from 0.0.0 to 2.8.1.
CVE-2026-81161 1 Drupal 1 Content Moderation Notifications 2026-09-02 3.3 Low
Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalation. This issue affects Content Moderation Notifications versions: from 0.0.0 to 3.9.0.
CVE-2026-81159 2026-09-02 3.7 Low
Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute Force. This issue affects Commerce CyberSource versions: from 0.0.0 to 1.10.0.
CVE-2026-81158 2026-09-02 5.3 Medium
Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1.8.0.
CVE-2026-76782 1 Drupal 1 Screenshot 2026-09-02 7.3 High
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.
CVE-2026-76759 1 Drupal 1 Screenshot 2026-09-02 7.3 High
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.
CVE-2026-76758 1 Drupal 1 Link Content Parser 2026-09-02 5.9 Medium
Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: *.*.
CVE-2026-76757 1 Drupal 1 Gammu Sms Daemon 2026-09-02 5.9 Medium
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.
CVE-2026-76756 1 Drupal 1 Gammu Sms Daemon 2026-09-02 5.9 Medium
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.
CVE-2026-76755 1 Drupal 1 Gammu Sms Daemon 2026-09-02 5.9 Medium
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.
CVE-2026-73730 1 Hewlett Packard Enterprise (hpe) 1 Fabric Composer 2026-09-02 6.5 Medium
A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system.
CVE-2026-73729 1 Hewlett Packard Enterprise (hpe) 1 Fabric Composer 2026-09-02 6.5 Medium
A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to upstream AFC dependencies to view sensitive information. Successful exploitation could allow an attacker to access data beyond what is authorized by the user's existing privilege level, potentially leading to further unauthorized access.
CVE-2026-73478 2026-09-02 5.3 Medium
Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing. This issue affects Diff versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1.
CVE-2026-73477 1 Drupal 1 Quick Tabs 2026-09-02 5.3 Medium
Incorrect Authorization vulnerability in Drupal Quick Tabs allows Forceful Browsing. This issue affects Quick Tabs versions: from 0.0.0 to 4.3.1.
CVE-2026-73476 1 Drupal 1 External Authentication 2026-09-02 5.4 Medium
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13.
CVE-2026-73475 1 Drupal 1 Commerce Paypal 2026-09-02 9.1 Critical
Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3.
CVE-2026-75134 2026-09-02 6.4 Medium
SEOWriting plugin for WordPress through 1.12.5 contains a stored cross-site scripting vulnerability that allows authenticated contributors to inject malicious JavaScript by exploiting an overly permissive KSES allowlist that explicitly permits the onload event handler on iframe elements. Attackers can store crafted JavaScript payloads in post content that execute when the affected post is viewed or previewed by higher-privileged users, potentially leading to privilege escalation or account compromise.
CVE-2026-59285 2 Spring, Vmware 2 Spring For Graphql, Spring For Graphql 2026-09-02 8.1 High
Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. Spring for GraphQL 2.0.0 - 2.0.4
CVE-2026-54789 1 Openidc 1 Mod Auth Openidc 2026-09-02 7.5 High
mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of `mod_auth_openidc`. The issue is fixed in version 2.4.19.4 by stopping the scan at the string terminator so a value-less token is rejected. No in-product workarounds are available. As a stop-gap, an upstream reverse proxy or WAF that rejects or normalizes malformed `Cookie` headers (tokens lacking `=`) can reduce exposure, but upgrading is the recommended remediation.