PULSE
ESEN
FEED
ransomincransom reclama a q-technicians.be · BE · Professional Servicesransomincransom reclama a bpcm.com · US · Professional Servicesransomincransom reclama a www.bogard.com.mx · MX · Otherransomwhitearmor reclama a Clínica La Sagrada Familia (Colombia) · CO · Healthcareransombyod reclama a ???ransombyod reclama a Twitter · US · Technologyransomn0n reclama a Company #147 · USransomn0n reclama a Company #146 · USransomn0n reclama a Company #145 · USransomn0n reclama a Company #144 · USransomn0n reclama a Company #143 · USransomn0n reclama a Company #142 · KRransomn0n reclama a Company #141 · USransomn0n reclama a Company #140 · CAransomincransom reclama a q-technicians.be · BE · Professional Servicesransomincransom reclama a bpcm.com · US · Professional Servicesransomincransom reclama a www.bogard.com.mx · MX · Otherransomwhitearmor reclama a Clínica La Sagrada Familia (Colombia) · CO · Healthcareransombyod reclama a ???ransombyod reclama a Twitter · US · Technologyransomn0n reclama a Company #147 · USransomn0n reclama a Company #146 · USransomn0n reclama a Company #145 · USransomn0n reclama a Company #144 · USransomn0n reclama a Company #143 · USransomn0n reclama a Company #142 · KRransomn0n reclama a Company #141 · USransomn0n reclama a Company #140 · CA
CVE Watch409.880 no arquivo completo

Vulnerabilidades exploráveis hoje

17,650na visualização atual

Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.

No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700

Distribuição · última janela

  • Crítica
    5,522
  • Alta
    21,023
  • Média
    20,152
  • Baixa
    2,081
Filtros
Filtros

Janela

Severidade

Filtros

Vulnerabilidades4,201–4,240 · 17,650
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1145425.4 MÉD
7.9%
——2Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth (OAuth2) & OpenID Connect versions: from 6.1.0 to 6.1.3.2dCVE-2026-1145414.8 MÉD
1.5%
——0Cross-Site Request Forgery (CSRF) vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.2dCVE-2026-1145406.3 MÉD
8.6%
——3Incorrect Authorization vulnerability in Drupal Domain allows Forceful Browsing. This issue affects Domain versions: from 3.0.0 to 3.0.2.2dCVE-2026-1145396.3 MÉD
15.9%
——5Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic allows Authentication Bypass. This issue affects DocCheck Basic versions: 7.x.2dCVE-2026-1145387.1 ALT
7.6%
——2Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Bootstrap allows Cross-Site Scripting (XSS). This issue affects Bootstrap versions: from 0.0.0 to 3.45.0.2dCVE-2026-1145375.3 MÉD
13.6%
——4Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful Browsing. This issue affects View Unpublished versions: from 0.0.0 to 1.5.0.2dCVE-2026-1145366.5 MÉD
5.3%
——2Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal USWDS Paragraph Components allows Stored XSS. This issue affects USWDS Paragraph Components versions: from 0.0.0 to 3.1.3.2dCVE-2026-1145355.3 MÉD
13.6%
——4Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0.2dCVE-2026-1145345.9 MÉD
6.6%
——2Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Block Attributes allows Stored XSS. This issue affects Block Attributes versions: from 0.0.0 to 2.1.0.2dCVE-2026-1145335.3 MÉD
13.6%
——4Missing Authorization vulnerability in Drupal Ágora Transparency Theme allows Forceful Browsing. This issue affects Ágora Transparency Theme versions: from 0.0.0 to 1.2.3.2dCVE-2026-1145326.5 MÉD
5.3%
——2Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons allows Cross-Site Scripting (XSS). This issue affects UI Icons versions: from 0.0.0 to 1.1.3, from 2.0.0 to 2.0.2.2dCVE-2026-1145316.5 MÉD
5.3%
——2Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Swiper formatter allows Stored XSS. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0.2dCVE-2026-1145305.3 MÉD
13.6%
——4Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing. This issue affects Dopup versions: from 0.0.0 to 1.0.7.2dCVE-2026-1145296.5 MÉD
5.3%
——2Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CSV Field allows Stored XSS. This issue affects CSV Field versions: from 0.0.0 to 2.0.10, from 3.0.0 to 3.0.7.2dCVE-2026-1145287.1 ALT
7.6%
——2Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Zero Point allows Stored XSS. This issue affects Zero Point versions: from 0.0.0 to 1.30.0, from 2.0.0 to 2.0.1.2dCVE-2026-1145277.1 ALT
7.6%
——2Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons allows Cross-Site Scripting (XSS). This issue affects UI Icons versions: from 0.0.0 to 1.1.3, from 2.0.0 to 2.0.2.2dCVE-2026-1145267.1 ALT
8.8%
——3Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Black Hole allows Stored XSS. This issue affects Black Hole versions: from 0.0.0 to 1.26.0, from 2.0.0 to 2.0.1.2dCVE-2026-1145257.1 ALT
7.6%
——2Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal ABC allows Stored XSS. This issue affects ABC versions: from 0.0.0 to 1.25.0, from 2.0.0 to 2.0.1.2dCVE-2026-1145247.2 ALT
24.7%
——7Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Privilege Escalation. This issue affects Custom Formatters versions: from 0.0.0 to 4.2.1.2dCVE-2026-1145239.8 CRÍ
64.4%
——19Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Ffmpeg Image Toolkit allows OS Command Injection. This issue affects Ffmpeg Image Toolkit versions: from 0.0.0 to 1.0.3.2dCVE-2026-1107386.5 MÉD
5.3%
——2Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Gin Admin Theme allows Cross-Site Scripting (XSS). This issue affects Gin Admin Theme versions: from 0.0.0 to 4.1.4, from 5.0.0 to 5.0.16.2dCVE-2026-1085156.5 MÉD
11.5%
——3Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 8.9.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-beta2.2dCVE-2026-1085146.5 MÉD
11.5%
——3Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 10.3.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-beta2.2dCVE-2026-1080998.1 ALT
35.7%
——11Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Entity List allows Reflection Injection. This issue affects Entity List versions: from 0.0.0 to 3.0.10.2dCVE-2026-1080978.1 ALT
47.6%
——14Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core allows Reflection Injection. This issue affects Drupal core versions: from 8.9.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-beta2.2dCVE-2026-1073124.3 MÉD
18.0%
——5Allocation of Resources Without Limits or Throttling vulnerability in Drupal Examples for Developers allows Excessive Allocation. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.7.9dCVE-2026-1073113.7 BAI
11.0%
——3Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful Browsing. This issue affects Permissions by Term versions: from 0.0.0 to 3.1.41.9dCVE-2026-1073104.3 MÉD
9.4%
——3Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue affects Freelinking versions: from 0.0.0 to 4.0.3.9dCVE-2026-1073093.7 BAI
9.5%
——3Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Browsing. This issue affects Easy Breadcrumb versions: from 0.0.0 to 2.0.11.9dCVE-2026-1073083.1 BAI
4.2%
——1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Country allows Cross-Site Scripting (XSS). This issue affects Country versions: from 0.0.0 to 2.1.3, from 2.2.0 to 2.2.1.9dCVE-2026-1073074.3 MÉD
9.4%
——3Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects SmartLinker AI versions: from 0.0.0 to 1.0.3.9dCVE-2026-1073063.8 BAI
9.0%
——3Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Menu Link Attributes allows Stored XSS. This issue affects Menu Link Attributes versions: from 0.0.0 to 1.8.0.9dCVE-2026-1072684.3 MÉD
22.3%
——7Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication - TFA / Passwordless Login allows Forceful Browsing. This issue affects Two Factor Authentication - TFA / Passwordless Login versions: from 0.0.0 to 5.4.1, from 5.5.0 to 5.5.2.9dCVE-2026-1072675.3 MÉD
13.6%
——4Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue affects DKAN versions: from 0.0.0 to 4.0.4, from 4.1.0 to 4.1.5.9dCVE-2026-1072665.3 MÉD
20.3%
——6Missing Authorization vulnerability in Drupal Views Share allows Forceful Browsing. This issue affects Views Share versions: from 0.0.0 to 2.0.1.2dCVE-2026-1072655.4 MÉD
7.6%
——2Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Leaflet allows Stored XSS. This issue affects Leaflet versions: from 0.0.0 to 10.4.13.9dCVE-2026-1072645.4 MÉD
7.9%
——2Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0.9dCVE-2026-1072635.4 MÉD
6.1%
——2Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenberg versions: from 0.0.0 to 2.15.0, from 3.0.0 to 3.0.7.9dCVE-2026-1072625.3 MÉD
1.9%
——1Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This issue affects Advanced Filesystem versions: from 0.0.0 to 1.0.28.9dCVE-2026-1072614.2 MÉD
8.8%
——3Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.9d