CVE Vulnerability Catalog

The vulnerability in the Drupal Monster Menus module involves improperly controlled modification of dynamically-determined object attributes, allowing Object Injection. This issue affects versions from 0.0.0 to 9.5.6.

The vulnerability in the Drupal Domain Login Restrict module allows authentication bypass using an alternate path or channel. This issue affects versions from 0.0.0 to 1.5.0.

The vulnerability in the Drupal Rabbit Hole module is due to incorrect authorization, allowing Forceful Browsing. This issue affects versions from 0.0.0 to 1.3.0.

The vulnerability in the Drupal Data field module involves improper neutralization of input during web page generation, allowing Stored XSS. This issue affects versions from 0.0.0 to 2.0.14.

The vulnerability in the Drupal AI File to Text module is due to incorrect authorization, allowing Forceful Browsing. This issue affects versions from 0.0.0 to 1.0.1.

The vulnerability in the Drupal Frontend Editing module is due to incorrect authorization, allowing Forceful Browsing. This issue affects versions from 0.0.0 to 1.9.3.

The vulnerability in the Drupal ImageAPI Optimize WebP module involves use of web browser cache containing sensitive information, allowing exploitation of incorrectly configured access control security levels. This issue affects versions from 0.0.0 to 2.1.2.

The vulnerability in the Drupal TinyPNG module is due to missing authorization, allowing Forceful Browsing. This issue affects versions from 0.0.0 to 2.0.2.

The vulnerability in the Drupal Media Alias Display module involves use of web browser cache containing sensitive information, allowing exploitation of incorrectly configured access control security levels. This issue affects versions from 0.0.0 to 2.1.2 and from 3.0.0 to 3.0.2.

The vulnerability in the Drupal Fullcalendar View module is due to incorrect authorization, allowing Forceful Browsing. This issue affects versions from 0.0.0 to 5.2.6.

The Drupal Media Bulk Upload module contains an incorrect authorization vulnerability that allows forceful browsing. This issue affects versions from 0.0.0 to 3.0.6.

The Drupal Simple User Management module contains an incorrect authorization vulnerability that allows forceful browsing. This issue affects versions from 0.0.0 to 1.11.0.

The Drupal Simple OAuth (OAuth2) & OpenID Connect module uses a web browser cache containing sensitive information, allowing exploitation of incorrectly configured access control security levels. This issue affects versions from 6.1.0 to 6.1.3.

The Drupal Frontend Editing module contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to force unwanted actions on behalf of a logged-in user. This issue affects versions from 0.0.0 to 1.9.3.

The Drupal Domain module contains an incorrect authorization vulnerability that allows forceful browsing. This issue affects versions from 3.0.0 to 3.0.2.

The Drupal DocCheck Basic module contains an authentication bypass vulnerability using an alternate path or channel. This issue affects 7.x versions.

The Drupal Bootstrap theme contains a Cross-Site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This issue affects versions from 0.0.0 to 3.45.0.

The Drupal View Unpublished module contains an incorrect authorization vulnerability that allows forceful browsing. This issue affects versions from 0.0.0 to 1.5.0.

The Drupal USWDS Paragraph Components module contains a Stored Cross-Site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This issue affects versions from 0.0.0 to 3.1.3.

The Drupal Swiper formatter module contains a missing authorization vulnerability that allows forceful browsing. This issue affects versions from 0.0.0 to 2.1.2 and from 3.0.1 to 3.1.0.