CVE Vulnerability Database
Search and browse 389,990 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-13241 | MEDIUM | 6.5 | 0.2% | Jul 10, 2026 | Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs version... |
| CVE-2026-13240 | MEDIUM | 6.5 | 0.2% | Jul 10, 2026 | Missing Authorization vulnerability in Drupal Paragraphs allows Forceful Browsing. This issue affects Paragraphs version... |
| CVE-2026-13239 | MEDIUM | 6.5 | 0.2% | Jul 10, 2026 | Missing Authorization vulnerability in Drupal WissKI allows Forceful Browsing. This issue affects WissKI versions: from ... |
| CVE-2026-13238 | MEDIUM | 4.8 | 0.1% | Jul 10, 2026 | Incorrect Authorization vulnerability in Drupal Commerce Realex / Global Payments allows Forceful Browsing. This issue a... |
| CVE-2026-13237 | MEDIUM | 4.8 | 0.2% | Jul 10, 2026 | Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents version... |
| CVE-2026-13236 | MEDIUM | 4.2 | 0.1% | Jul 10, 2026 | Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions:... |
| CVE-2026-13235 | LOW | 3.3 | 0.2% | Jul 10, 2026 | Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects ... |
| CVE-2026-13234 | MEDIUM | 6.1 | 0.2% | Jul 10, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific... |
| CVE-2026-13233 | LOW | 3.3 | 0.2% | Jul 10, 2026 | Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issu... |
| CVE-2026-13232 | LOW | 3.1 | 0.2% | Jul 10, 2026 | Incorrect Authorization vulnerability in Drupal Advanced Content Feedback (aka admin_feedback) allows Forceful Browsing.... |
| CVE-2026-13231 | MEDIUM | 6.1 | 0.2% | Jul 10, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Advanced Co... |
| CVE-2026-12535 | CRITICAL | 9.8 | 0.4% | Jul 10, 2026 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Formatter Field a... |
| CVE-2026-11909 | LOW | 3.3 | 0.2% | Jul 10, 2026 | Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing. This issue affects Examp... |
| CVE-2026-11908 | MEDIUM | 5.4 | 0.2% | Jul 10, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allo... |
| CVE-2026-10770 | MEDIUM | 6.1 | 0.2% | Jul 10, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Anti-Spam b... |
| CVE-2026-10769 | MEDIUM | 5.4 | 0.2% | Jul 10, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Co... |
| CVE-2026-10768 | CRITICAL | 9.8 | 0.3% | Jul 10, 2026 | Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful Browsing. This issue affects LocalGov W... |
| CVE-2026-9726 | CRITICAL | 9.8 | 0.3% | Jul 10, 2026 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal Alternativ... |
| CVE-2026-7639 | HIGH | 7.8 | 0.1% | Jul 10, 2026 | Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use afte... |
| CVE-2026-58499 | HIGH | 8.2 | 0.4% | Jul 10, 2026 | EverOS is a memory runtime for agents. Prior to 1.0.1, EverOS is vulnerable to path traversal in the POST /api/v1/memory... |
| CVE-2026-57807 | CRITICAL | 9.8 | 0.4% | Jul 10, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security Software Pvt Ltd. OAuth Si... |
| CVE-2026-57575 | MEDIUM | 6.9 | 0.3% | Jul 10, 2026 | Misskey is an open source, federated social media platform. Prior to 2026.6.0, Misskey contains a Server-Side Request Fo... |
| CVE-2026-57574 | HIGH | 7.4 | 0.3% | Jul 10, 2026 | Misskey is an open source, federated social media platform. Prior to 2026.6.0, Misskey contains a vulnerability in Time-... |
| CVE-2026-57230 | MEDIUM | 5.4 | 0.2% | Jul 10, 2026 | OpenReplay is a self-hosted session replay suite. Prior to 1.27.0, the session search and analytics API in enterprise ed... |
| CVE-2026-57221 | MEDIUM | 5 | 0.3% | Jul 10, 2026 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, RabbitMQ does not perform aut... |