Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (372838 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-3903 1 Ueditor Project 1 Ueditor 2025-09-02 7.3 High
Vulnerability in Drupal UEditor - 百度编辑器.This issue affects UEditor - 百度编辑器: *.*.
CVE-2025-3904 1 Sportsleague Project 1 Sportsleague 2025-09-02 7.3 High
Vulnerability in Drupal Sportsleague.This issue affects Sportsleague: *.*.
CVE-2025-3907 1 Drunkenmonkey 1 Search Api Solr 2025-09-02 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue affects Search API Solr: from 0.0.0 before 4.3.9.
CVE-2024-52888 1 Checkpoint 3 Gaia Os, Mobile Access, Remote Access Vpn 2025-09-02 5.4 Medium
For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties.
CVE-2024-52887 1 Checkpoint 3 Gaia Os, Mobile Access, Remote Access Vpn 2025-09-02 3.5 Low
Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list.
CVE-2024-33664 1 Python-jose Project 1 Python-jose 2025-09-02 5.3 Medium
python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.
CVE-2025-31689 1 General Data Protection Regulation Project 1 General Data Protection Regulation 2025-09-02 8.1 High
Cross-Site Request Forgery (CSRF) vulnerability in Drupal General Data Protection Regulation allows Cross Site Request Forgery.This issue affects General Data Protection Regulation: from 0.0.0 before 3.0.1, from 3.1.0 before 3.1.2.
CVE-2025-31690 1 Cache Utility Project 1 Cache Utility 2025-09-02 8.8 High
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Cache Utility allows Cross Site Request Forgery.This issue affects Cache Utility: from 0.0.0 before 1.2.1.
CVE-2025-31691 1 Oauth2 Server Project 1 Oauth2 Server 2025-09-02 9.8 Critical
Missing Authorization vulnerability in Drupal OAuth2 Server allows Forceful Browsing.This issue affects OAuth2 Server: from 0.0.0 before 2.1.0.
CVE-2025-31694 1 Two-factor Authentication Project 1 Two-factor Authentication 2025-09-02 8.1 High
Incorrect Authorization vulnerability in Drupal Two-factor Authentication (TFA) allows Forceful Browsing.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.10.0.
CVE-2025-31695 1 Upstreamable 1 Link Field Display Mode Formatter 2025-09-02 6.1 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Link field display mode formatter allows Cross-Site Scripting (XSS).This issue affects Link field display mode formatter: from 0.0.0 before 1.6.0.
CVE-2025-31696 1 Chapterthree 1 Rapidoc Oas Field Formatter 2025-09-02 6.1 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal RapiDoc OAS Field Formatter allows Cross-Site Scripting (XSS).This issue affects RapiDoc OAS Field Formatter: from 0.0.0 before 1.0.1.
CVE-2025-31697 1 Formatter Suite Project 1 Formatter Suite 2025-09-02 6.1 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Formatter Suite allows Cross-Site Scripting (XSS).This issue affects Formatter Suite: from 0.0.0 before 2.1.0.
CVE-2025-3059 1 Profile Private Project 1 Profile Private 2025-09-02 5.3 Medium
Vulnerability in Drupal Profile Private.This issue affects Profile Private: *.*.
CVE-2025-3060 1 Flattern Project 1 Flattern 2025-09-02 6.6 Medium
Vulnerability in Drupal Flattern – Multipurpose Bootstrap Business Profile.This issue affects Flattern – Multipurpose Bootstrap Business Profile: *.*.
CVE-2025-3061 1 Material Admin Project 1 Material Admin 2025-09-02 6.6 Medium
Vulnerability in Drupal Material Admin.This issue affects Material Admin: *.*.
CVE-2025-3062 1 Admin Lte Theme Project 1 Admin Lte Theme 2025-09-02 6.6 Medium
Vulnerability in Drupal Drupal Admin LTE theme.This issue affects Drupal Admin LTE theme: *.*.
CVE-2025-31286 1 Trendmicro 1 Trend Vision One 2025-09-02 4.6 Medium
An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a malicious user to execute arbitrary code. Please note: this issue has already been addressed on the backend service and is no longer considered an active vulnerability.
CVE-2025-3129 1 Access Code Project 1 Access Code 2025-09-02 4.8 Medium
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4.
CVE-2024-13290 1 Ohdear 1 Ohdear Integration 2025-09-02 5.3 Medium
Incorrect Authorization vulnerability in Drupal OhDear Integration allows Forceful Browsing.This issue affects OhDear Integration: from 0.0.0 before 2.0.4.