Vulnerabilidades en Drupal

576 resultados
CVE-2024-13308LOWBrowser Back Button - Moderately critical - Cross site scripting - SA-CONTRIB-2024-072EPSS 0.3%CVE-2026-107312MEDIUMExamples for Developers - Less critical - Allocation of resources without limits or throttling - SA-CONTRIB-2026-215EPSS 0.3%CVE-2025-31696MEDIUMRapiDoc OAS Field Formatter - Moderately critical - Cross site scripting - SA-CONTRIB-2025-025EPSS 0.3%CVE-2025-31679MEDIUMIgnition Error Pages - Critical - Cross Site Scripting - SA-CONTRIB-2025-007EPSS 0.3%CVE-2025-31695MEDIUMLink field display mode formatter - Moderately critical - Cross site scripting - SA-CONTRIB-2025-024EPSS 0.3%CVE-2025-31687MEDIUMSpamSpan filter - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-016EPSS 0.3%CVE-2025-31697MEDIUMFormatter Suite - Moderately critical - Cross site scripting - SA-CONTRIB-2025-026EPSS 0.3%CVE-2025-48012MEDIUMOne Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-063EPSS 0.3%CVE-2026-87954MEDIUMTaxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152EPSS 0.3%CVE-2025-7715MEDIUMBlock Attributes - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-090EPSS 0.3%CVE-2025-48010MEDIUMOne Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-061EPSS 0.3%CVE-2026-96367MEDIUMWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162EPSS 0.3%CVE-2025-3900MEDIUMColorbox - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-041EPSS 0.3%CVE-2020-13673—The Entity Embed module provides a filter to allow embedding entities in content fields. In certain circumstances, the filter could allow anEPSS 0.3%CVE-2026-5343HIGHSAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031EPSS 0.3%CVE-2026-58588MEDIUMDrupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-066EPSS 0.3%CVE-2026-58587MEDIUMDrupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-065EPSS 0.3%CVE-2026-81159LOWCommerce CyberSource - Moderately critical - Insufficient input validation - SA-CONTRIB-2026-106EPSS 0.3%CVE-2026-81201MEDIUMMonster Menus - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-116EPSS 0.3%CVE-2026-10770MEDIUMAnti-Spam by CleanTalk - Moderately critical - Cross site scripting - SA-CONTRIB-2026-042EPSS 0.3%