7.5

CVSS3.1

CVE-2025-12466 - Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth (OAuth2) & OpenID Connect: from 6.0.0 before 6.0.7.

📅 Published: Oct. 29, 2025, 11:14 p.m. 🔄 Last Modified: Dec. 4, 2025, 2:57 p.m.

6.1

CVSS3.1

CVE-2025-12083 - CivicTheme Design System - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-113

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CivicTheme Design System allows Cross-Site Scripting (XSS).This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.

📅 Published: Oct. 29, 2025, 11:14 p.m. 🔄 Last Modified: Dec. 3, 2025, 8:08 p.m.

7.5

CVSS3.1

CVE-2025-12082 - CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112

Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.

📅 Published: Oct. 29, 2025, 11:14 p.m. 🔄 Last Modified: Dec. 3, 2025, 8:10 p.m.

5.3

CVSS3.1

CVE-2025-10929 - Reverse Proxy Header - Less critical - Access bypass - SA-CONTRIB-2025-111

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2.

📅 Published: Oct. 29, 2025, 11:14 p.m. 🔄 Last Modified: Dec. 12, 2025, 5:51 p.m.

6.5

CVSS3.1

CVE-2025-10930 - Currency - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-110

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Currency allows Cross Site Request Forgery.This issue affects Currency: from 0.0.0 before 3.5.0.

📅 Published: Oct. 29, 2025, 11:13 p.m. 🔄 Last Modified: Dec. 12, 2025, 6:06 p.m.

3.8

CVSS3.1

CVE-2025-10931 - Umami Analytics - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-109

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Umami Analytics allows Cross-Site Scripting (XSS).This issue affects Umami Analytics: from 0.0.0 before 1.0.1.

📅 Published: Oct. 29, 2025, 11:13 p.m. 🔄 Last Modified: Dec. 3, 2025, 8:11 p.m.

6.3

CVSS3.1

CVE-2025-10928 - Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-108

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.5.

📅 Published: Oct. 29, 2025, 11:13 p.m. 🔄 Last Modified: Dec. 12, 2025, 5:54 p.m.

6.1

CVSS3.1

CVE-2025-10927 - Plausible tracking - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-107

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Plausible tracking allows Cross-Site Scripting (XSS).This issue affects Plausible tracking: from 0.0.0 before 1.0.2.

📅 Published: Oct. 29, 2025, 11:13 p.m. 🔄 Last Modified: Dec. 12, 2025, 5:55 p.m.

6.1

CVSS3.1

CVE-2025-10926 - JSON Field - Critical - Cross Site Scripting - SA-CONTRIB-2025-106

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal JSON Field allows Cross-Site Scripting (XSS).This issue affects JSON Field: from 0.0.0 before 1.5.

📅 Published: Oct. 29, 2025, 11:12 p.m. 🔄 Last Modified: Dec. 12, 2025, 6 p.m.

7.5

CVSS3.1

CVE-2025-9954 - Acquia DAM - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-105

Missing Authorization vulnerability in Drupal Acquia DAM allows Forceful Browsing.This issue affects Acquia DAM: from 0.0.0 before 1.1.5.

📅 Published: Oct. 29, 2025, 11:12 p.m. 🔄 Last Modified: Dec. 3, 2025, 8:06 p.m.
Total resulsts: 346107
Page 2911 of 34,611
« previous page » next page
Filters