Threat database

247 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.4	EPSS 0.2%	CVE-2026-58589FlowDrop · Missing Authorization Medium5.4EPSS 0.2%2026-07-10CVE Database V5CVE-2026-58589 Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue affects FlowDrop versions: from 0.0.0 to 1.6.0. EPSS 0.2%Vulnerability Drupal #cwe-862	CVE Database V5	2026-07-10
Medium	6.1	EPSS 0.3%	CVE-2026-58588Drupal Canvas · Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") Medium6.1EPSS 0.3%2026-07-10CVE Database V5CVE-2026-58588 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting (XSS). This issue affects Drupal Canvas versions: from 0.0.0 to 1.4.2, from 1.5.0 to 1.5.2, from 1.6.0 to 1.6.1, from 1.7.0 to 1.7.1. EPSS 0.3%Vulnerability Drupal #cwe-79	CVE Database V5	2026-07-10
Medium	6.1	EPSS 0.3%	CVE-2026-58587Drupal Canvas · Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") Medium6.1EPSS 0.3%2026-07-10CVE Database V5CVE-2026-58587 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting (XSS). This issue affects Drupal Canvas versions: from 0.0.0 to 1.4.2, from 1.5.0 to 1.5.2, from 1.6.0 to 1.6.1, from 1.7.0 to 1.7.1. EPSS 0.3%Vulnerability Drupal #cwe-79	CVE Database V5	2026-07-10
High	8.1	EPSS 0.4%	CVE-2026-13244Tealium iQ Tag Management · Improperly Controlled Modification of Dynamically-Determined Object Attributes High8.1EPSS 0.4%2026-07-10CVE Database V5CVE-2026-13244 Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Tealium iQ Tag Management allows Object Injection. This issue affects Tealium iQ Tag Management versions: from 0.0.0 to 2.4.0. EPSS 0.4%Vulnerability Drupal #cwe-915	CVE Database V5	2026-07-10
Medium	4.8	EPSS 0.1%	CVE-2026-13243Salesforce Suite · Cross-Site Request Forgery (CSRF) Medium4.8EPSS 0.1%2026-07-10CVE Database V5CVE-2026-13243 Cross-Site Request Forgery (CSRF) vulnerability in Drupal Salesforce Suite allows Cross Site Request Forgery. This issue affects Salesforce Suite versions: from 0.0.0 to 5.1.3. EPSS 0.1%Vulnerability Drupal #cwe-352	CVE Database V5	2026-07-10
Medium	6.5	EPSS 0.3%	CVE-2026-13242Geolocation Field · SQL Injection Medium6.5EPSS 0.3%2026-07-10CVE Database V5CVE-2026-13242 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Geolocation Field allows SQL Injection. This issue affects Geolocation Field versions: from 0.0.0 to 3.15.0. EPSS 0.3%Vulnerability Drupal #cwe-89	CVE Database V5	2026-07-10
Medium	6.5	EPSS 0.3%	CVE-2026-13241Paragraphs · Missing Authorization Medium6.5EPSS 0.3%2026-07-10CVE Database V5CVE-2026-13241 Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0. EPSS 0.3%Vulnerability Drupal #cwe-862	CVE Database V5	2026-07-10
Medium	6.5	EPSS 0.3%	CVE-2026-13240Paragraphs · Missing Authorization Medium6.5EPSS 0.3%2026-07-10CVE Database V5CVE-2026-13240 Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs versions: from 0.0.0 to 1.21.0. EPSS 0.3%Vulnerability Drupal #cwe-862	CVE Database V5	2026-07-10
Medium	6.5	EPSS 0.3%	CVE-2026-13239WissKI · Missing Authorization Medium6.5EPSS 0.3%2026-07-10CVE Database V5CVE-2026-13239 Missing Authorization vulnerability in Drupal WissKI allows Forceful Browsing. This issue affects WissKI versions: from 0.0.0 to 4.2.0. EPSS 0.3%Vulnerability Drupal #cwe-862	CVE Database V5	2026-07-10
Medium	4.8	EPSS 0.2%	CVE-2026-13238Commerce Realex / Global Payments · Incorrect Authorization Medium4.8EPSS 0.2%2026-07-10CVE Database V5CVE-2026-13238 Incorrect Authorization vulnerability in Drupal Commerce Realex / Global Payments allows Forceful Browsing. This issue affects Commerce Realex / Global Payments versions: from 0.0.0 to 3.0.2. EPSS 0.2%Vulnerability Drupal #cwe-863	CVE Database V5	2026-07-10
Medium	4.8	EPSS 0.2%	CVE-2026-13237AI Agents · Incorrect Authorization Medium4.8EPSS 0.2%2026-07-10CVE Database V5CVE-2026-13237 Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1. EPSS 0.2%Vulnerability Drupal #cwe-863	CVE Database V5	2026-07-10
Medium	4.2	EPSS 0.2%	CVE-2026-13236AI Agents · Missing Authorization Medium4.2EPSS 0.2%2026-07-10CVE Database V5CVE-2026-13236 Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1. EPSS 0.2%Vulnerability Drupal #cwe-862	CVE Database V5	2026-07-10
Low	3.3	EPSS 0.2%	CVE-2026-13235AI (Artificial Intelligence) · Missing Authorization Low3.3EPSS 0.2%2026-07-10CVE Database V5CVE-2026-13235 Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3. EPSS 0.2%Vulnerability Drupal #cwe-862	CVE Database V5	2026-07-10
Medium	6.1	EPSS 0.3%	CVE-2026-13234AI (Artificial Intelligence) · Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") Medium6.1EPSS 0.3%2026-07-10CVE Database V5CVE-2026-13234 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3. EPSS 0.3%Vulnerability Drupal #cwe-79	CVE Database V5	2026-07-10
Low	3.3	EPSS 0.2%	CVE-2026-13233OpenAI Provider · Server-Side Request Forgery (SSRF) Low3.3EPSS 0.2%2026-07-10CVE Database V5CVE-2026-13233 Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2. EPSS 0.2%Vulnerability Drupal #cwe-918	CVE Database V5	2026-07-10
Low	3.1	EPSS 0.2%	CVE-2026-13232Advanced Content Feedback (aka admin_feedback) · Incorrect Authorization Low3.1EPSS 0.2%2026-07-10CVE Database V5CVE-2026-13232 Incorrect Authorization vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allows Forceful Browsing. This issue affects Advanced Content Feedback (aka admin_feedback) versions: from 0.0.0 to 2.8.0. EPSS 0.2%Vulnerability Drupal #cwe-863	CVE Database V5	2026-07-10
Medium	6.1	EPSS 0.3%	CVE-2026-13231Advanced Content Feedback (aka admin_feedback) · Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") Medium6.1EPSS 0.3%2026-07-10CVE Database V5CVE-2026-13231 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allows Stored XSS. This issue affects Advanced Content Feedback (aka admin_feedback) versions: from 0.0.0 to 2.8.0. EPSS 0.3%Vulnerability Drupal #cwe-79	CVE Database V5	2026-07-10
High	8.1	EPSS 0.4%	CVE-2026-55810Plotly.js Graphing · Improperly Controlled Modification of Dynamically-Determined Object Attributes High8.1EPSS 0.4%2026-07-10CVE Database V5CVE-2026-55810 Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. This issue affects Plotly.js Graphing versions: from 0.0.0 to 3.0.2. EPSS 0.4%Vulnerability Drupal #cwe-915	CVE Database V5	2026-07-10
High	8.1	EPSS 0.4%	CVE-2026-55809Flag attendance field · Improperly Controlled Modification of Dynamically-Determined Object Attributes High8.1EPSS 0.4%2026-07-10CVE Database V5CVE-2026-55809 Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Flag attendance field allows Object Injection. This issue affects Flag attendance field versions: from 0.0.0 to 1.2. EPSS 0.4%Vulnerability Drupal #cwe-915	CVE Database V5	2026-07-10
Critical	9.8	EPSS 0.6%	CVE-2026-12535Formatter Field · Improperly Controlled Modification of Dynamically-Determined Object Attributes Critical9.8EPSS 0.6%2026-07-10CVE Database V5CVE-2026-12535 Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Formatter Field allows Object Injection. This issue affects Formatter Field versions: from 0.0.0 to 2.0.0. EPSS 0.6%Vulnerability Drupal #cwe-915	CVE Database V5	2026-07-10

Showing 101–120 of 247 results