Vulnerabilidades en Drupal
576 resultadosCVE-2026-3531MEDIUMOpenID Connect / OAuth client - Moderately critical - Access bypass - SA-CONTRIB-2026-026EPSS 0.3%CVE-2024-13301MEDIUMOAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) - Critical - Cross Site Scripting - SA-CONTRIB-2024-067EPSS 0.3%CVE-2025-8362MEDIUMGoogleTag Manager - Moderately critical - Cross-site scripting - SA-CONTRIB-2025-094EPSS 0.3%CVE-2026-13231MEDIUMAdvanced Content Feedback (aka admin_feedback) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-051EPSS 0.3%CVE-2026-16638MEDIUMMedia Folders - Moderately critical - Cross site scripting - SA-CONTRIB-2026-080EPSS 0.3%CVE-2025-47709MEDIUMEnterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-055EPSS 0.3%CVE-2026-3527MEDIUMAJAX Dashboard - Critical - Access bypass - SA-CONTRIB-2026-022EPSS 0.3%CVE-2026-13234MEDIUMAI (Artificial Intelligence) - Moderately critical - Information Disclosure / Cross-site Scripting - SA-CONTRIB-2026-054EPSS 0.3%CVE-2026-16640MEDIUMSearch API Autocomplete - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-082EPSS 0.3%CVE-2026-81160MEDIUMSlick Carousel - Moderately critical - Cross Site Scripting - SA-CONTRIB-2026-117EPSS 0.3%CVE-2026-3528MEDIUMCalculation Fields - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-023EPSS 0.3%CVE-2026-3529MEDIUMGoogle Analytics GA4 - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-024EPSS 0.3%CVE-2024-13272MEDIUMParagraphs table - Critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-036EPSS 0.3%CVE-2025-9552MEDIUMSynchronize composer.json With Contrib Modules - Critical - Unsupported - SA-CONTRIB-2025-102EPSS 0.3%CVE-2025-9554MEDIUMOwl Carousel 2 - Critical - Unsupported - SA-CONTRIB-2025-104EPSS 0.3%CVE-2025-9553MEDIUMAPI Key manager - Critical - Unsupported - SA-CONTRIB-2025-103EPSS 0.3%CVE-2026-84916LOWIslandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126EPSS 0.3%CVE-2026-110176HIGHFile Force Download for Drupal 7 Access Bypass via Unconditional Download HeadersEPSS 0.2%CVE-2025-3733MEDIUMbaguetteBox.js - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-034EPSS 0.2%CVE-2026-16648LOWMailer Plus Log - Moderately critical - Access bypass - SA-CONTRIB-2026-128EPSS 0.2%