CVE Vulnerability Database
Search and browse 420,595 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-84917 | MEDIUM | 6.5 | 0.1% | Oct 22, 2026 | Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonap... |
| CVE-2026-84916 | LOW | 3.7 | 0.1% | Oct 22, 2026 | Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora version... |
| CVE-2026-84915 | MEDIUM | 4.6 | 0.2% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Component b... |
| CVE-2026-84914 | MEDIUM | 5.3 | 0.1% | Oct 22, 2026 | Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calcul... |
| CVE-2026-84913 | MEDIUM | 4.6 | 0.1% | Oct 22, 2026 | Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate ver... |
| CVE-2026-84912 | MEDIUM | 4.6 | 0.1% | Oct 22, 2026 | Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects ... |
| CVE-2026-84911 | LOW | 3.1 | 0.2% | Oct 22, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific... |
| CVE-2026-84910 | MEDIUM | 4.2 | 0.1% | Oct 22, 2026 | Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Sear... |
| CVE-2026-81163 | MEDIUM | 5.4 | 0.2% | Oct 22, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Imp... |
| CVE-2026-16648 | LOW | 3.8 | 0.1% | Oct 22, 2026 | Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Sto... |
| CVE-2026-114728 | MEDIUM | 5.3 | 0.4% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling o... |
| CVE-2026-114727 | HIGH | 8.3 | 0.3% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing ... |
| CVE-2026-114726 | MEDIUM | 5.8 | 0.3% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounc... |
| CVE-2026-114725 | MEDIUM | 5 | 0.3% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send... |
| CVE-2026-114724 | HIGH | 8.1 | 0.3% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserial... |
| CVE-2026-114723 | MEDIUM | 5.3 | 0.3% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thum... |
| CVE-2026-114722 | MEDIUM | 6.5 | 0.3% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils... |
| CVE-2026-114721 | LOW | 3.1 | 0.3% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be bypassed.... |
| CVE-2026-114720 | HIGH | 7.1 | 0.8% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. A remote ... |
| CVE-2026-114719 | MEDIUM | 4.3 | 0.2% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk actio... |
| CVE-2026-114718 | MEDIUM | 6.1 | 0.2% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the passwo... |
| CVE-2026-114717 | MEDIUM | 5.8 | 0.3% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a messa... |
| CVE-2026-114716 | HIGH | 8.5 | 0.4% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send... |
| CVE-2026-114715 | HIGH | 8.1 | 0.3% | Oct 22, 2026 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Mo... |
| CVE-2026-114664 | HIGH | 7.1 | 0.2% | Oct 22, 2026 | Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk.doctype.event.event.get_... |