https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-31T12:13:43.181341+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/drupal-contrib-2026-291 DRUPAL-CONTRIB-2026-291 2026-10-31T12:13:43.236755+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/cms_content_sync

This module enables you to share and reuse content across websites.

The module did not sufficiently encrypt the password of the system user used when synchronizing content. This can potentially allow unprivileged users to view the password.

This vulnerability is mitigated by the fact that an attacker must have access to a database dump or database read access to the user data table. This vulnerability is not exploitable without prior database access.

 https://db.gcve.eu/vuln/fkie_cve-2026-118568 fkie_cve-2026-118568 2026-10-31T12:13:43.236867+00:00

Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve Embedded Sensitive Data. This issue affects Content Sync (content-sync.io) versions: from 0.0.0 to 3.2.2.

 https://db.gcve.eu/vuln/ghsa-whvp-fx3x-2r9q GHSA-whvp-fx3x-2r9q 2026-10-31T12:13:43.236912+00:00

Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve Embedded Sensitive Data. This issue affects Content Sync (content-sync.io) versions: from 0.0.0 to 3.2.2.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4230 WID-SEC-W-2026-4230 — Drupal Erweiterungen: Mehrere Schwachstellen 2026-10-31T12:13:43.236937+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um erweiterte Berechtigungen zu erlangen und Benutzerkonten zu übernehmen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und nicht näher spezifizierte Auswirkungen zu verursachen.