Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

398,118 vulnerabilities match.

CVESeveritySummary
CVE-2026-1039637.5 HighGlib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service
CVE-2026-107249Not scoredBlock AJAX - Highly critical - PHP object injection - SA-CONTRIB-2026-192
CVE-2026-107250Not scoredECA Helper - Critical - Unsupported - SA-CONTRIB-2026-193
CVE-2026-107251Not scoredEntity Reference Manager (Merge entities) - Critical - Access bypass - SA-CONTRIB-2026-194
CVE-2026-107252Not scoredMathJax: LaTeX for Drupal - Critical - Cross site scripting - SA-CONTRIB-2026-195
CVE-2026-107253Not scoredOrphans Media - Critical - Unsupported - SA-CONTRIB-2026-196
CVE-2026-107254Not scoredAuthenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197
CVE-2026-107257Not scoredActstream - Critical - Access bypass - SA-CONTRIB-2026-198
CVE-2026-107258Not scoredInline Entity Form Dialog - Moderately critical - Access bypass - SA-CONTRIB-2026-199
CVE-2026-107259Not scoredLinked Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-200
CVE-2026-107261Not scoredAuthenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201
CVE-2026-107263Not scoredGutenberg - Moderately critical - Access bypass - SA-CONTRIB-2026-202
CVE-2026-107264Not scoredInline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203
CVE-2026-107265Not scoredLeaflet - Moderately critical - Cross site scripting - SA-CONTRIB-2026-204
CVE-2026-107266Not scoredViews Share - Moderately critical - Access bypass - SA-CONTRIB-2026-205
CVE-2026-96389Not scoredXray Audit - Moderately critical - Access bypass - SA-CONTRIB-2026-206
CVE-2026-107268Not scoredTwo Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207
CVE-2026-107267Not scoredDKAN - Moderately critical - Access bypass - SA-CONTRIB-2026-208
CVE-2026-107306Not scoredMenu Link Attributes - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-209
CVE-2026-107307Not scoredSmartLinker AI - Moderately critical - Information disclosure - SA-CONTRIB-2026-210
CVE-2026-107308Not scoredCountry - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-211
CVE-2026-107309Not scoredEasy Breadcrumb - Moderately critical - Information disclosure - SA-CONTRIB-2026-212
CVE-2026-107310Not scoredFreelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213
CVE-2026-107311Not scoredPermissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214
CVE-2026-107312Not scoredExamples for Developers - Less critical - Allocation of resources without limits or throttling - SA-CONTRIB-2026-215
CVE-2026-107255Not scoredRestrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216
CVE-2026-107262Not scoredAdvanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217
CVE-2026-108097Not scoredDrupal core - Critical - Remote code execution - SA-CORE-2026-014
CVE-2026-110738Not scoredGin Admin Theme - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-219
CVE-2026-108515Not scoredDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015
CVE-2026-108514Not scoredDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016
CVE-2026-108099Not scoredEntity List - Critical - Remote code execution - SA-CONTRIB-2026-218
CVE-2026-114523Not scoredFfmpeg Image Toolkit - Highly critical - Remote Code Execution - SA-CONTRIB-2026-220
CVE-2026-114527Not scoredUI Icons - Critical - Cross site scripting - SA-CONTRIB-2026-221
CVE-2026-114528Not scoredZero Point - Critical - Cross-site scripting - SA-CONTRIB-2026-222
CVE-2026-114526Not scoredBlack Hole - Critical - Cross-site scripting - SA-CONTRIB-2026-223
CVE-2026-114525Not scoredABC - Critical - Cross-site scripting - SA-CONTRIB-2026-224
CVE-2026-114524Not scoredCustom Formatters - Critical - Remote code execution - SA-CONTRIB-2026-225
CVE-2026-114529Not scoredCSV Field - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-226
CVE-2026-114530Not scoredDopup - Critical - Information disclosure - SA-CONTRIB-2026-227
CVE-2026-114531Not scoredSwiper formatter - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-228
CVE-2026-107260Not scoredSector Distribution - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-229
CVE-2026-114532Not scoredUI Icons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-230
CVE-2026-114533Not scoredÁgora Transparency Theme - Moderately critical - Information disclosure - SA-CONTRIB-2026-231
CVE-2026-114534Not scoredBlock Attributes - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-232
CVE-2026-114535Not scoredSwiper formatter - Moderately critical - Information disclosure - SA-CONTRIB-2026-233
CVE-2026-114536Not scoredUSWDS Paragraph Components - Moderately critical - Cross site scripting - SA-CONTRIB-2026-234
CVE-2026-114537Not scoredView Unpublished - Moderately critical - Access bypass - SA-CONTRIB-2026-235
CVE-2026-114538Not scoredBootstrap - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-236
CVE-2026-114539Not scoredDocCheck Basic - Moderately critical - Access bypass - SA-CONTRIB-2026-237

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.