CVE Vulnerability Database
Search and browse 420,256 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114543 | — | — | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Simple User Management allows Forceful Browsing. This issue affects Simp... |
| CVE-2026-114542 | MEDIUM | 5.4 | 0.1% | Oct 30, 2026 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect... |
| CVE-2026-114541 | MEDIUM | 4.8 | 0.1% | Oct 30, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue... |
| CVE-2026-114540 | MEDIUM | 6.3 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing. This issue affects Domain versions: fro... |
| CVE-2026-114539 | MEDIUM | 6.3 | 0.2% | Oct 30, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic allows Authentication By... |
| CVE-2026-114538 | HIGH | 7.1 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Bootstrap a... |
| CVE-2026-114537 | MEDIUM | 5.3 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing. This issue affects View Unpub... |
| CVE-2026-114536 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal USWDS Parag... |
| CVE-2026-114535 | MEDIUM | 5.3 | 0.1% | Oct 30, 2026 | Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper forma... |
| CVE-2026-114534 | MEDIUM | 5.9 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Block Attri... |
| CVE-2026-114533 | MEDIUM | 5.3 | 0.1% | Oct 30, 2026 | Missing Authorization vulnerability in Drupal Ágora Transparency Theme allows Forceful Browsing. This issue affects Ágor... |
| CVE-2026-114532 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons al... |
| CVE-2026-114531 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Swiper form... |
| CVE-2026-114530 | MEDIUM | 5.3 | 0.1% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing. This issue affects Dopup versions: from ... |
| CVE-2026-114529 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CSV Field a... |
| CVE-2026-114528 | HIGH | 7.1 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Zero Point ... |
| CVE-2026-114527 | HIGH | 7.1 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons al... |
| CVE-2026-114526 | HIGH | 7.1 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Black Hole ... |
| CVE-2026-114525 | HIGH | 7.1 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal ABC allows ... |
| CVE-2026-114524 | HIGH | 7.2 | 0.1% | Oct 30, 2026 | Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Privilege Escalation. This issue ... |
| CVE-2026-114523 | CRITICAL | 9.8 | 0.5% | Oct 30, 2026 | Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Ffmpe... |
| CVE-2026-110738 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Gin Admin T... |
| CVE-2026-108515 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core... |
| CVE-2026-108514 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core... |
| CVE-2026-108099 | HIGH | 8.1 | 0.3% | Oct 30, 2026 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Entity List ... |