Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownThe Navigation module doesn't sufficiently sanitize certain attributes, which can lead to a cross-site scripting (XSS) vulnerability.Oct 14, 2026
- UnknownThe Drupal core Link module provides a field type that can be used for internal and external URLs.Oct 14, 2026
- UnknownA remote code execution vulnerability exists within the Field UI module in Drupal core.Oct 14, 2026
- UnknownDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012Jul 15, 2026
- UnknownDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011Jul 15, 2026
- UnknownDrupal core - Moderately critical - Information disclosure - SA-CORE-2026-010Jul 15, 2026
- UnknownDrupal core - Moderately critical - Improper validation - SA-CORE-2026-009Jun 17, 2026
- UnknownDrupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008Jun 17, 2026
- UnknownDrupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007Jun 17, 2026
- UnknownDrupal core - Moderately critical - Gadget chain - SA-CORE-2026-006Jun 17, 2026
- UnknownDrupal core - Critical - PHP object injection - SA-CORE-2026-005Jun 17, 2026
- Critical9.8Drupal Core SQL Injection VulnerabilityKEVEPSS 15.7%May 20, 2026
- UnknownDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003Apr 15, 2026
- UnknownDrupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002Apr 15, 2026
- UnknownDrupal core - Critical - Cross-site scripting - SA-CORE-2026-001Apr 15, 2026
- UnknownDrupal core - Moderately critical - Information disclosure - SA-CORE-2025-008Nov 12, 2025
- UnknownDrupal core - Moderately critical - Defacement - SA-CORE-2025-007Nov 12, 2025
- UnknownDrupal core - Moderately critical - Gadget chain - SA-CORE-2025-006Nov 12, 2025
- UnknownDrupal core - Moderately critical - Denial of Service - SA-CORE-2025-005Nov 12, 2025
- UnknownDrupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004Mar 19, 2025
- UnknownDrupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003Feb 19, 2025
- UnknownDrupal core - Moderately critical - Access bypass - SA-CORE-2025-002Feb 19, 2025
- UnknownDrupal core - Critical - Cross site scripting - SA-CORE-2025-001Feb 19, 2025
- UnknownDrupal core - Moderately critical - Gadget chain - SA-CORE-2024-008Nov 20, 2024
24 records · page 1 of 1
PreviousNext