Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Consent Management allows Cross-Site Scripting (XSS).This issueCheck if you run itEPSS 0.24%May 14, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal oEmbed Providers allows Cross-Site Scripting (XSS).This issue affects oCheck if you run itEPSS 0.24%May 14, 2025
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in Drupal Restrict route by IP allows Cross Site Request Forgery.This issue affects Restrict route by IP: from 0.0.0 before 1.3.0.Check if you run itEPSS 0.20%May 14, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue affects Search API Solr: from 0.0.0 before 4.3.9.Check if you run itEPSS 0.15%Apr 23, 2025
- High7.3Vulnerability in Drupal Sportsleague.This issue affects Sportsleague: *.*.Check if you run itEPSS 0.30%Apr 23, 2025
- High7.3Vulnerability in Drupal UEditor - 百度编辑器.This issue affects UEditor - 百度编辑器: *.*.Check if you run itEPSS 0.39%Apr 23, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Block Class allows Cross-Site Scripting (XSS).This issue affects BlockCheck if you run itEPSS 0.24%Apr 23, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Bootstrap Site Alert allows Cross-Site Scripting (XSS).This issue affecCheck if you run itEPSS 0.24%Apr 23, 2025
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS).This issue affects Colorbox:Check if you run itEPSS 0.25%Apr 23, 2025
- Medium5.9Vulnerability in Drupal Drupal 8 Google Optimize Hide Page.This issue affects Drupal 8 Google Optimize Hide Page: *.*.Check if you run itEPSS 0.32%Apr 16, 2025
- Medium5.9Vulnerability in Drupal Google Optimize.This issue affects Google Optimize: *.*.Check if you run itEPSS 0.32%Apr 16, 2025
- Medium5.9Vulnerability in Drupal Google Maps: Store Locator.This issue affects Google Maps: Store Locator: *.*.Check if you run itEPSS 0.32%Apr 16, 2025
- Medium5.9Vulnerability in Drupal Simple GTM.This issue affects Simple GTM: *.*.Check if you run itEPSS 0.32%Apr 16, 2025
- Medium5.9Vulnerability in Drupal Panelizer (obsolete).This issue affects Panelizer (obsolete): *.*.Check if you run itEPSS 0.32%Apr 16, 2025
- Medium5.9Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue affects Stage File Proxy: from 0.0.0 before 3.1.5.Check if you run itEPSS 0.36%Apr 16, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal baguetteBox.Js allows Cross-Site Scripting (XSS).This issue affects bagCheck if you run itEPSS 0.25%Apr 16, 2025
- UnknownDrupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004Check if you run itEPSS 0.49%Mar 19, 2025
- UnknownDrupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003Check if you run itEPSS 0.58%Feb 19, 2025
- UnknownDrupal core - Moderately critical - Access bypass - SA-CORE-2025-002Check if you run itEPSS 0.31%Feb 19, 2025
- UnknownDrupal core - Critical - Cross site scripting - SA-CORE-2025-001Check if you run itEPSS 0.30%Feb 19, 2025
- UnknownDrupal core - Moderately critical - Gadget chain - SA-CORE-2024-008Check if you run itEPSS 0.98%Nov 20, 2024
- Unknownmarketo_ma_project marketo_ma Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.95%Sep 19, 2024
- Unknownubercart ubercart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.16%Jan 26, 2022
- UnknownDrupal avatar_uploader Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 55.08%Apr 12, 2021
- UnknownDrupal Drupal Core Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 99.97%Apr 12, 2021