CVE Vulnerability Database
Search and browse 420,256 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-118553 | MEDIUM | 5.5 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific... |
| CVE-2026-118552 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific... |
| CVE-2026-118551 | LOW | 3.1 | 0.1% | Oct 30, 2026 | Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded ... |
| CVE-2026-118550 | MEDIUM | 5.9 | 0.2% | Oct 30, 2026 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Ex... |
| CVE-2026-118549 | HIGH | 7.1 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific... |
| CVE-2026-118548 | LOW | 3.7 | 0.2% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection. This issue affec... |
| CVE-2026-118546 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific... |
| CVE-2026-118545 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific... |
| CVE-2026-118544 | LOW | 3.7 | 0.1% | Oct 30, 2026 | Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Core allows Forceful Browsing. T... |
| CVE-2026-118543 | MEDIUM | 5.3 | 0.1% | Oct 30, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Core allows Cross Site Request Forgery. This issue af... |
| CVE-2026-118542 | LOW | 2.7 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core... |
| CVE-2026-118541 | MEDIUM | 4.3 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core... |
| CVE-2026-118540 | MEDIUM | 5.3 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core... |
| CVE-2026-118539 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core v... |
| CVE-2026-114573 | HIGH | 8.8 | 0.2% | Oct 30, 2026 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Monster Menus all... |
| CVE-2026-114572 | MEDIUM | 5.4 | 0.2% | Oct 30, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentica... |
| CVE-2026-114571 | MEDIUM | 6.5 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful Browsing. This issue affects Rabbit Hole ver... |
| CVE-2026-114555 | LOW | 3.5 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Data field ... |
| CVE-2026-114554 | MEDIUM | 4.3 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. This issue affects AI File to ... |
| CVE-2026-114553 | MEDIUM | 5.4 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend E... |
| CVE-2026-114548 | LOW | 3.7 | 0.1% | Oct 30, 2026 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiti... |
| CVE-2026-114547 | LOW | 3.7 | 0.1% | Oct 30, 2026 | Missing Authorization vulnerability in Drupal TinyPNG allows Forceful Browsing. This issue affects TinyPNG versions: fro... |
| CVE-2026-114546 | LOW | 3.7 | 0.1% | Oct 30, 2026 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting ... |
| CVE-2026-114545 | MEDIUM | 5.4 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Fullcalendar View allows Forceful Browsing. This issue affects Fullcalen... |
| CVE-2026-114544 | MEDIUM | 5.4 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful Browsing. This issue affects Media Bul... |