CVE Veritabanı

Teknik veriler otomatik gelir, önemli açıklıklar Türkçeye çevrilir. Editörlerimizin incelediği kayıtlar İncelendi etiketiyle işaretlenir.

NVD, CISA KEV ve EPSS kaynaklarından otomatik senkronize edilir

Filtreleri temizle

1.000+ sonuç · sayfa 32

CVE-2026-114540Bilinmiyor

Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing. This issue affects Domain versions: from 3.0.0 to 3.0.2.

4 gün önce · EPSS %0.1

—
CVE-2026-114539Bilinmiyor

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic allows Authentication Bypass. This issue affects DocCheck Basic versions: 7.x.

4 gün önce · EPSS %0.2

—
CVE-2026-114538Bilinmiyor

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Bootstrap allows Cross-Site Scripting (XSS). This issue affects Bootstrap versions: from…

4 gün önce · EPSS %0.2

—
CVE-2026-114537Bilinmiyor

Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing. This issue affects View Unpublished versions: from 0.0.0 to 1.5.0.

4 gün önce · EPSS %0.1

—
CVE-2026-114536Bilinmiyor

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal USWDS Paragraph Components allows Stored XSS. This issue affects USWDS Paragraph…

4 gün önce · EPSS %0.2

—
CVE-2026-114535Bilinmiyor

Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0.

4 gün önce · EPSS %0.1

—
CVE-2026-114534Bilinmiyor

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Block Attributes allows Stored XSS. This issue affects Block Attributes versions: from…

4 gün önce · EPSS %0.2

—
CVE-2026-114533Bilinmiyor

Missing Authorization vulnerability in Drupal Ágora Transparency Theme allows Forceful Browsing. This issue affects Ágora Transparency Theme versions: from 0.0.0 to 1.2.3.

4 gün önce · EPSS %0.1

—
CVE-2026-114532Bilinmiyor

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons allows Cross-Site Scripting (XSS). This issue affects UI Icons versions: from…

4 gün önce · EPSS %0.2

—
CVE-2026-114531Bilinmiyor

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Swiper formatter allows Stored XSS. This issue affects Swiper formatter versions: from…

4 gün önce · EPSS %0.2

—
CVE-2026-114530Bilinmiyor

Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing. This issue affects Dopup versions: from 0.0.0 to 1.0.7.

4 gün önce · EPSS %0.1

—
CVE-2026-114529Bilinmiyor

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CSV Field allows Stored XSS. This issue affects CSV Field versions: from 0.0.0 to 2.0.10,…

4 gün önce · EPSS %0.2

—
CVE-2026-114528Bilinmiyor

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Zero Point allows Stored XSS. This issue affects Zero Point versions: from 0.0.0 to…

4 gün önce · EPSS %0.2

—
CVE-2026-114527Bilinmiyor

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons allows Cross-Site Scripting (XSS). This issue affects UI Icons versions: from…

4 gün önce · EPSS %0.2

—
CVE-2026-114526Bilinmiyor

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Black Hole allows Stored XSS. This issue affects Black Hole versions: from 0.0.0 to…

4 gün önce · EPSS %0.2

—
CVE-2026-114525Bilinmiyor

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal ABC allows Stored XSS. This issue affects ABC versions: from 0.0.0 to 1.25.0, from 2.0.0…

4 gün önce · EPSS %0.2

—
CVE-2026-114524Bilinmiyor

Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Privilege Escalation. This issue affects Custom Formatters versions: from 0.0.0 to 4.2.1.

4 gün önce · EPSS %0.1

—
CVE-2026-114523Bilinmiyor

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Ffmpeg Image Toolkit allows OS Command Injection. This issue affects Ffmpeg Image…

4 gün önce · EPSS %0.5

—
CVE-2026-110738Bilinmiyor

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Gin Admin Theme allows Cross-Site Scripting (XSS). This issue affects Gin Admin Theme…

4 gün önce · EPSS %0.2

—
CVE-2026-108515Bilinmiyor

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions:…

4 gün önce · EPSS %0.2

—
CVE-2026-108514Bilinmiyor

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions:…

4 gün önce · EPSS %0.2

—
CVE-2026-108099Bilinmiyor

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Entity List allows Reflection Injection. This issue affects Entity List versions: from…

4 gün önce · EPSS %0.3

—
CVE-2026-108097Bilinmiyor

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core allows Reflection Injection. This issue affects Drupal core versions: from 8.9.0…

4 gün önce · EPSS %0.3

—
CVE-2026-107312Orta

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Examples for Developers allows Excessive Allocation. This issue affects Examples for Developers versions: from 0.0.0 to…

4 gün önce · EPSS %0.3

4.3
CVE-2026-107311Düşük

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful Browsing. This issue affects Permissions by Term versions: from 0.0.0 to 3.1.41.

4 gün önce · EPSS %0.2

3.7
CVE-2026-107310Orta

Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue affects Freelinking versions: from 0.0.0 to 4.0.3.

4 gün önce · EPSS %0.2

4.3
CVE-2026-107309Düşük

Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. This issue affects Easy Breadcrumb versions: from 0.0.0 to 2.0.11.

4 gün önce · EPSS %0.2

3.7
CVE-2026-107308Düşük

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Country allows Cross-Site Scripting (XSS). This issue affects Country versions: from 0.0.0…

4 gün önce · EPSS %0.1

3.1
CVE-2026-107307Orta

Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects SmartLinker AI versions: from 0.0.0 to 1.0.3.

4 gün önce · EPSS %0.2

4.3
CVE-2026-107306Düşük

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Menu Link Attributes allows Stored XSS. This issue affects Menu Link Attributes versions:…

4 gün önce · EPSS %0.2

3.8