Threats affecting pkg:generic/osquery

194,305 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.9	EPSS 0.1%	CVE-2026-107253 · Orphans Media – Critical – Unsupported – SA-CONTRIB-2026-196 Medium5.9EPSS 0.1%2026-10-30CVE Database V5 Vulnerability in Drupal Orphans Media. This issue affects Orphans Media versions: .. EPSS 0.1%Vulnerability Drupal	CVE Database V5	2026-10-30
Medium	4.8	EPSS 0.2%	CVE-2026-107254Drupal Authenticator Login Plus (2FA) · Authentication Bypass Using an Alternate Path or Channel Medium4.8EPSS 0.2%2026-10-30CVE Database V5CVE-2026-107254 Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1. EPSS 0.2%Vulnerability CWE-288	CVE Database V5	2026-10-30
Medium	6.5	EPSS 0.1%	CVE-2026-107257Drupal Actstream · Incorrect Authorization Medium6.5EPSS 0.1%2026-10-30CVE Database V5CVE-2026-107257 Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1. EPSS 0.1%Vulnerability CWE-863	CVE Database V5	2026-10-30
Medium	5.4	EPSS 0.1%	CVE-2026-107258Drupal Inline Entity Form Dialog · Incorrect Authorization Medium5.4EPSS 0.1%2026-10-30CVE Database V5CVE-2026-107258 Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue affects Inline Entity Form Dialog versions: from 0.0.0 to 1.0.6. EPSS 0.1%Vulnerability CWE-863	CVE Database V5	2026-10-30
Medium	5.4	EPSS 0.2%	CVE-2026-107259Drupal Linked Field · Template Injection Medium5.4EPSS 0.2%2026-10-30CVE Database V5CVE-2026-107259 Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked Field allows Code Injection. This issue affects Linked Field versions: from 0.0.0 to 1.8.0. EPSS 0.2%Vulnerability CWE-1336	CVE Database V5	2026-10-30
Medium	4.2	EPSS 0.2%	CVE-2026-107261Drupal Authenticator Login Plus (2FA) · Authentication Bypass Using an Alternate Path or Channel Medium4.2EPSS 0.2%2026-10-30CVE Database V5CVE-2026-107261 Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1. EPSS 0.2%Vulnerability CWE-288	CVE Database V5	2026-10-30
Medium	5.4	EPSS 0.1%	CVE-2026-107263Drupal Gutenberg · Incorrect Authorization Medium5.4EPSS 0.1%2026-10-30CVE Database V5CVE-2026-107263 Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenberg versions: from 0.0.0 to 2.15.0, from 3.0.0 to 3.0.7. EPSS 0.1%Vulnerability CWE-863	CVE Database V5	2026-10-30
Medium	5.4	EPSS 0.2%	CVE-2026-107264Drupal Inline Formatter Field · Template Injection Medium5.4EPSS 0.2%2026-10-30CVE Database V5CVE-2026-107264 Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0. EPSS 0.2%Vulnerability CWE-1336	CVE Database V5	2026-10-30
Medium	5.4	EPSS 0.2%	CVE-2026-107265Drupal Leaflet · Cross-site Scripting Medium5.4EPSS 0.2%2026-10-30CVE Database V5CVE-2026-107265 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Leaflet allows Stored XSS. This issue affects Leaflet versions: from 0.0.0 to 10.4.13. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2026-10-30
High	–	EPSS 0.1%	CVE-2026-107266Drupal Views Share · Missing Authorization HighEPSS 0.1%2026-10-30CVE Database V5CVE-2026-107266 CVE-2026-107266 is a missing authorization vulnerability in the Drupal Views Share module that allows forceful browsing. This flaw affects Views Share versions from 0.0.0 up to but not including 2.0.1. The issue has been fixed in version 2.0.1. EPSS 0.1%Vulnerability CWE-862	CVE Database V5	2026-10-30
Medium	6.5	EPSS 0.1%	CVE-2026-96389Drupal Xray Audit · Missing Authorization Medium6.5EPSS 0.1%2026-10-30CVE Database V5CVE-2026-96389 Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affects Xray Audit versions: from 0.0.0 to 1.6.3, from 2.0.0 to 2.0.4, from 3.0.0 to 3.1.1. EPSS 0.1%Vulnerability CWE-862	CVE Database V5	2026-10-30
Medium	4.3	EPSS 0.2%	CVE-2026-107268Drupal Two Factor Authentication – TFA / Passwordless Login · Insertion of Sensitive Information Into Sent Data Medium4.3EPSS 0.2%2026-10-30CVE Database V5CVE-2026-107268 Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication - TFA / Passwordless Login allows Forceful Browsing. This issue affects Two Factor Authentication - TFA / Passwordless Login versions: from 0.0.0 to 5.4.1, from 5.5.0 to 5.5.2. EPSS 0.2%Vulnerability CWE-201	CVE Database V5	2026-10-30
Medium	5.3	EPSS 0.1%	CVE-2026-107267Drupal DKAN · Missing Authorization Medium5.3EPSS 0.1%2026-10-30CVE Database V5CVE-2026-107267 Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue affects DKAN versions: from 0.0.0 to 4.0.4, from 4.1.0 to 4.1.5. EPSS 0.1%Vulnerability CWE-862	CVE Database V5	2026-10-30
Low	3.8	EPSS 0.2%	CVE-2026-107306Drupal Menu Link Attributes · Cross-site Scripting Low3.8EPSS 0.2%2026-10-30CVE Database V5CVE-2026-107306 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Menu Link Attributes allows Stored XSS. This issue affects Menu Link Attributes versions: from 0.0.0 to 1.8.0. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2026-10-30
Medium	4.3	EPSS 0.1%	CVE-2026-107307Drupal SmartLinker AI · Incorrect Authorization Medium4.3EPSS 0.1%2026-10-30CVE Database V5CVE-2026-107307 Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects SmartLinker AI versions: from 0.0.0 to 1.0.3. EPSS 0.1%Vulnerability CWE-863	CVE Database V5	2026-10-30
Low	3.1	EPSS 0.2%	CVE-2026-107308Drupal Country · Cross-site Scripting Low3.1EPSS 0.2%2026-10-30CVE Database V5CVE-2026-107308 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Country allows Cross-Site Scripting (XSS). This issue affects Country versions: from 0.0.0 to 2.1.3, from 2.2.0 to 2.2.1. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2026-10-30
Low	3.7	EPSS 0.1%	CVE-2026-107309Drupal Easy Breadcrumb · Missing Authorization Low3.7EPSS 0.1%2026-10-30CVE Database V5CVE-2026-107309 Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. This issue affects Easy Breadcrumb versions: from 0.0.0 to 2.0.11. EPSS 0.1%Vulnerability CWE-862	CVE Database V5	2026-10-30
Medium	4.3	EPSS 0.1%	CVE-2026-107310Drupal Freelinking · Server-Side Request Forgery Medium4.3EPSS 0.1%2026-10-30CVE Database V5CVE-2026-107310 Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue affects Freelinking versions: from 0.0.0 to 4.0.3. EPSS 0.1%Vulnerability CWE-918	CVE Database V5	2026-10-30
Low	3.7	EPSS 0.1%	CVE-2026-107311Drupal Permissions by Term · Unchecked Error Condition Low3.7EPSS 0.1%2026-10-30CVE Database V5CVE-2026-107311 Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful Browsing. This issue affects Permissions by Term versions: from 0.0.0 to 3.1.41. EPSS 0.1%Vulnerability CWE-754	CVE Database V5	2026-10-30
Medium	4.3	EPSS 0.1%	CVE-2026-107312Drupal Examples for Developers · Unthrottled Resource Allocation Medium4.3EPSS 0.1%2026-10-30CVE Database V5CVE-2026-107312 Allocation of Resources Without Limits or Throttling vulnerability in Drupal Examples for Developers allows Excessive Allocation. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.7. EPSS 0.1%Vulnerability CWE-770	CVE Database V5	2026-10-30

Page 50 of 9,716