Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownThe Entity List module provides a way to create lists of entities without Views.Oct 14, 2026
- UnknownThe Navigation module doesn't sufficiently sanitize certain attributes, which can lead to a cross-site scripting (XSS) vulnerability.Oct 14, 2026
- UnknownThe Drupal core Link module provides a field type that can be used for internal and external URLs.Oct 14, 2026
- UnknownGin is an administration theme that provides a modern, clean, and customizable backend UI for editors and site administrators.Oct 14, 2026
- UnknownA remote code execution vulnerability exists within the Field UI module in Drupal core.Oct 14, 2026
- UnknownDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012Jul 15, 2026
- UnknownDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011Jul 15, 2026
- UnknownDrupal core - Moderately critical - Information disclosure - SA-CORE-2026-010Jul 15, 2026
- UnknownDrupal core - Moderately critical - Improper validation - SA-CORE-2026-009Jun 17, 2026
- UnknownDrupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008Jun 17, 2026
- UnknownDrupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007Jun 17, 2026
- UnknownDrupal core - Moderately critical - Gadget chain - SA-CORE-2026-006Jun 17, 2026
- UnknownDrupal core - Critical - PHP object injection - SA-CORE-2026-005Jun 17, 2026
- Medium5.1Simple Hierarchical Select (SHS) for Drupal 7 contains cross-site scripting risk due to improper output escaping of term-derived text.May 21, 2026
- Medium5.1In the Drupal 7 Term Reference Tree module, two stored XSS vectors exist in the widget/formatter rendering pipeline.May 21, 2026
- Critical9.8Drupal Core SQL Injection VulnerabilityKEVEPSS 15.7%May 20, 2026
- Critical9.8Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing.May 19, 2026
- Medium5.4Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox Inline allows Cross-Site Scripting (XSS).May 19, 2026
- Low2.7Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing.May 19, 2026
- Low3.7Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing.May 19, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Obfuscate allows Cross-Site Scripting (XSS).May 19, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Orejime allows Cross-Site Scripting (XSS).May 19, 2026
- Medium5.1Drupal avatar_uploader 7.x-1.0-beta8 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manip…EPSS 0.2%May 10, 2026
- Medium6.1Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003Apr 15, 2026
- Medium6.6Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002Apr 15, 2026
67 records · page 1 of 3
PreviousNext