CVE Vulnerability Database
Search and browse 420,595 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-96378 | MEDIUM | 4.3 | 0.4% | Oct 22, 2026 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerce Decouple... |
| CVE-2026-96377 | MEDIUM | 5.3 | 0.1% | Oct 22, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Alloc... |
| CVE-2026-96376 | MEDIUM | 6.4 | 0.6% | Oct 22, 2026 | Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud... |
| CVE-2026-96375 | MEDIUM | 4.8 | 0.1% | Oct 22, 2026 | Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects ... |
| CVE-2026-96374 | MEDIUM | 4.2 | 0.1% | Oct 22, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue ... |
| CVE-2026-96373 | LOW | 3.3 | 0.2% | Oct 22, 2026 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f... |
| CVE-2026-96372 | MEDIUM | 5.4 | 0.2% | Oct 22, 2026 | Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects ... |
| CVE-2026-96371 | MEDIUM | 5.4 | 0.2% | Oct 22, 2026 | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers... |
| CVE-2026-96370 | MEDIUM | 5.4 | 0.2% | Oct 22, 2026 | Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform v... |
| CVE-2026-96369 | LOW | 3.1 | 0.2% | Oct 22, 2026 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly ... |
| CVE-2026-96368 | MEDIUM | 4.6 | 0.2% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all... |
| CVE-2026-96367 | MEDIUM | 4.6 | 0.2% | Oct 22, 2026 | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers... |
| CVE-2026-96366 | MEDIUM | 5.3 | 0.2% | Oct 22, 2026 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f... |
| CVE-2026-96365 | HIGH | 7.5 | 0.2% | Oct 22, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This i... |
| CVE-2026-96364 | MEDIUM | 5.3 | 0.1% | Oct 22, 2026 | Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affect... |
| CVE-2026-96363 | LOW | 3.1 | 0.2% | Oct 22, 2026 | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform vers... |
| CVE-2026-96362 | MEDIUM | 4.2 | 0.2% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all... |
| CVE-2026-96361 | MEDIUM | 4.6 | 0.2% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all... |
| CVE-2026-96360 | LOW | 3.5 | 0.2% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all... |
| CVE-2026-96359 | MEDIUM | 4.6 | 0.2% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all... |
| CVE-2026-96358 | MEDIUM | 4.6 | 0.2% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all... |
| CVE-2026-96357 | MEDIUM | 4.6 | 0.2% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform all... |
| CVE-2026-96356 | MEDIUM | 5.3 | 0.2% | Oct 22, 2026 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: f... |
| CVE-2026-96355 | CRITICAL | 9.1 | 0.2% | Oct 22, 2026 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Inject... |
| CVE-2026-87955 | MEDIUM | 4.3 | 0.1% | Oct 22, 2026 | Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This issue affects Ultimate... |