Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (1023 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-81205 1 Drupal 1 Ldap / Active Directory Integration 2026-09-02 5.3 Medium
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Drupal LDAP / Active Directory Integration allows LDAP Injection. This issue affects LDAP / Active Directory Integration versions: from 0.0.0 to 2.2.1.
CVE-2026-81269 1 Drupal 1 Data Field 2026-09-02 5.3 Medium
Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.
CVE-2026-81168 1 Drupal 1 Captcha Protected Page 2026-09-02 3.7 Low
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versions: from 0.0.0 to 1.0.2.
CVE-2026-81166 1 Drupal 1 Digital Signage Framework 2026-09-02 5.3 Medium
Missing Authorization vulnerability in Drupal Digital Signage Framework allows Forceful Browsing. This issue affects Digital Signage Framework versions: from 0.0.0 to 2.6.1.
CVE-2026-81165 1 Drupal 1 Blazy 2026-09-02 5.3 Medium
Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18.
CVE-2026-81162 1 Drupal 1 Dxpr Builder: The Best Editing (ai) Experience For Drupal 2026-09-02 5.3 Medium
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience for Drupal allows Forceful Browsing. This issue affects DXPR Builder: The Best Editing (AI) Experience for Drupal versions: from 0.0.0 to 2.8.1.
CVE-2026-81161 1 Drupal 1 Content Moderation Notifications 2026-09-02 3.3 Low
Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalation. This issue affects Content Moderation Notifications versions: from 0.0.0 to 3.9.0.
CVE-2026-76782 1 Drupal 1 Screenshot 2026-09-02 7.3 High
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.
CVE-2026-76759 1 Drupal 1 Screenshot 2026-09-02 7.3 High
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.
CVE-2026-76758 1 Drupal 1 Link Content Parser 2026-09-02 5.9 Medium
Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: *.*.
CVE-2026-76757 1 Drupal 1 Gammu Sms Daemon 2026-09-02 5.9 Medium
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.
CVE-2026-76756 1 Drupal 1 Gammu Sms Daemon 2026-09-02 5.9 Medium
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.
CVE-2026-76755 1 Drupal 1 Gammu Sms Daemon 2026-09-02 5.9 Medium
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.
CVE-2026-73477 1 Drupal 1 Quick Tabs 2026-09-02 5.3 Medium
Incorrect Authorization vulnerability in Drupal Quick Tabs allows Forceful Browsing. This issue affects Quick Tabs versions: from 0.0.0 to 4.3.1.
CVE-2026-73476 1 Drupal 1 External Authentication 2026-09-02 5.4 Medium
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13.
CVE-2026-73475 1 Drupal 1 Commerce Paypal 2026-09-02 9.1 Critical
Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3.
CVE-2026-81201 1 Drupal 1 Monster Menus 2026-09-02 6.1 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Monster Menus allows Stored XSS. This issue affects Monster Menus versions: from 0.0.0 to 9.5.3.
CVE-2026-81160 1 Drupal 1 Slick Carousel 2026-09-02 6.1 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Slick Carousel allows Stored XSS. This issue affects Slick Carousel versions: from 0.0.0 to 2.1.0.
CVE-2026-81167 1 Drupal 1 Address Suggestion 2026-09-02 4.8 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Address Suggestion allows Cross-Site Scripting (XSS). This issue affects Address Suggestion versions: from 0.0.0 to 1.0.25.
CVE-2026-16647 1 Drupal 1 Disable Login Page 2026-09-02 N/A
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality Bypass. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4.