Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Login Disable allows Functionality Bypass.This issue affects Login Disable: from 0.0.0…Check if you run itEPSS 0.20%Mar 25, 2026
- UnknownDrupal core - Moderately critical - Information disclosure - SA-CORE-2025-008Check if you run itEPSS 0.26%Nov 12, 2025
- UnknownDrupal core - Moderately critical - Defacement - SA-CORE-2025-007Check if you run itEPSS 0.23%Nov 12, 2025
- UnknownDrupal core - Moderately critical - Gadget chain - SA-CORE-2025-006Check if you run itEPSS 0.26%Nov 12, 2025
- UnknownDrupal core - Moderately critical - Denial of Service - SA-CORE-2025-005Check if you run itEPSS 0.32%Nov 12, 2025
- Medium4.8Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFCheck this weekEPSS 24.00%Jun 26, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Lightgallery allows Cross-Site Scripting (XSS).This issue affects LightCheck if you run itEPSS 0.33%Jun 11, 2025
- Medium6.5Allocation of Resources Without Limits or Throttling vulnerability in Drupal Admin Audit Trail allows Excessive Allocation.This issue affects Admin Audit Trail: from 0.0.0 before 1Check if you run itEPSS 0.31%Jun 11, 2025
- High8.8Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect allows Functionality Misuse.This issue affects Commerce Alphabank Redirect: from 0.0.0 before 1.0.3.Check if you run itEPSS 0.33%Jun 11, 2025
- High8.8Incorrect Authorization vulnerability in Drupal Commerce Eurobank (Redirect) allows Functionality Misuse.This issue affects Commerce Eurobank (Redirect): from 0.0.0 before 2.1.1.Check if you run itEPSS 0.32%Jun 11, 2025
- Medium5.3Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0.Check if you run itEPSS 0.27%Jun 11, 2025
- Medium5.3Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0.Check if you run itEPSS 0.27%Jun 11, 2025
- Medium4.8Authentication Bypass by Capture-replay vulnerability in Drupal One Time Password allows Remote Services with Stolen Credentials.This issue affects One Time Password: from 0.0.0 beCheck this weekEPSS 26.00%May 21, 2025
- Medium4.8Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 befoCheck this weekEPSS 32.00%May 21, 2025
- Medium4.8Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 befoCheck this weekEPSS 26.00%May 21, 2025
- Low3.1Missing Authorization vulnerability in Drupal Single Content Sync allows Functionality Misuse.This issue affects Single Content Sync: from 0.0.0 before 1.4.12.Check this weekEPSS 23.00%May 21, 2025
- High7.5Allocation of Resources Without Limits or Throttling vulnerability in Drupal Events Log Track allows Excessive Allocation.This issue affects Events Log Track: from 0.0.0 before 3.1Check this weekEPSS 42.00%May 21, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Piwik PRO allows Cross-Site Scripting (XSS).This issue affects Piwik PRCheck this weekEPSS 23.00%May 21, 2025
- High7.4Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFCheck if you run itEPSS 0.39%May 14, 2025
- Medium6.5Missing Authorization vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Forceful Browsing.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0,Check if you run itEPSS 0.25%May 14, 2025
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Cross Site Request Forgery.This issue affects Enterprise MFA - TFA for Drupal: fromCheck if you run itEPSS 0.20%May 14, 2025
- High7.5Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFCheck if you run itEPSS 0.42%May 14, 2025
- Medium4.8Authentication Bypass by Capture-replay vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Remote Services with Stolen Credentials.This issue affects Enterprise MFA - TCheck if you run itEPSS 0.28%May 14, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal IFrame Remove Filter allows Cross-Site Scripting (XSS).This issue affecCheck if you run itEPSS 0.28%May 14, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting (XSS).ThiCheck if you run itEPSS 0.24%May 14, 2025