Search

Expected end of text, found '–' (at char 42), (line:1, col:43)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (377452 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-81201 1 Drupal 1 Monster Menus 2026-09-02 N/A
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Monster Menus allows Stored XSS. This issue affects Monster Menus versions: from 0.0.0 to 9.5.3.
CVE-2026-81205 1 Drupal 1 Ldap / Active Directory Integration 2026-09-02 N/A
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Drupal LDAP / Active Directory Integration allows LDAP Injection. This issue affects LDAP / Active Directory Integration versions: from 0.0.0 to 2.2.1.
CVE-2026-81162 1 Drupal 1 Dxpr Builder: The Best Editing (ai) Experience For Drupal 2026-09-02 N/A
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience for Drupal allows Forceful Browsing. This issue affects DXPR Builder: The Best Editing (AI) Experience for Drupal versions: from 0.0.0 to 2.8.1.
CVE-2026-81166 1 Drupal 1 Digital Signage Framework 2026-09-02 N/A
Missing Authorization vulnerability in Drupal Digital Signage Framework allows Forceful Browsing. This issue affects Digital Signage Framework versions: from 0.0.0 to 2.6.1.
CVE-2026-81269 1 Drupal 1 Data Field 2026-09-02 N/A
Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.
CVE-2026-81161 1 Drupal 1 Content Moderation Notifications 2026-09-02 N/A
Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalation. This issue affects Content Moderation Notifications versions: from 0.0.0 to 3.9.0.
CVE-2026-81168 1 Drupal 1 Captcha Protected Page 2026-09-02 N/A
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA Protected Page allows Functionality Bypass. This issue affects CAPTCHA Protected Page versions: from 0.0.0 to 1.0.2.
CVE-2026-81165 1 Drupal 1 Blazy 2026-09-02 N/A
Incorrect Authorization vulnerability in Drupal Blazy allows Forceful Browsing. This issue affects Blazy versions: from 0.0.0 to 3.0.18.
CVE-2026-81167 1 Drupal 1 Address Suggestion 2026-09-02 4.8 Medium
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Address Suggestion allows Cross-Site Scripting (XSS). This issue affects Address Suggestion versions: from 0.0.0 to 1.0.25.
CVE-2026-76759 1 Drupal 1 Screenshot 2026-09-02 N/A
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.
CVE-2026-84119 1 Mozilla 2 Firefox, Thunderbird 2026-09-02 9.6 Critical
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-76782 1 Drupal 1 Screenshot 2026-09-02 N/A
Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.
CVE-2026-76758 1 Drupal 1 Link Content Parser 2026-09-02 N/A
Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: *.*.
CVE-2026-76755 1 Drupal 1 Gammu Sms Daemon 2026-09-02 N/A
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.
CVE-2026-76756 1 Drupal 1 Gammu Sms Daemon 2026-09-02 N/A
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.
CVE-2026-76757 1 Drupal 1 Gammu Sms Daemon 2026-09-02 N/A
Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.
CVE-2026-73476 1 Drupal 1 External Authentication 2026-09-02 N/A
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13.
CVE-2026-73475 1 Drupal 1 Commerce Paypal 2026-09-02 N/A
Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3.
CVE-2026-84120 1 Mozilla 2 Firefox, Thunderbird 2026-09-02 5.4 Medium
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-52831 2026-09-02 8 High
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container (/bin/sh, -c, <command>). Two fields in the trigger specification flow into this string without adequate sanitization: event.headers keys and event.body. This issue has been patched in version 1.16.4.