https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 00:02:33 +0000 https://db.gcve.eu/vuln/bdu:2026-18554 bdu:2026-18554 https://db.gcve.eu/vuln/bdu:2026-18554 https://db.gcve.eu/vuln/drupal-contrib-2026-218 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/entity_list</p> <p>The Entity List module provides a way to create lists of entities without Views.</p> <p>The module has a remote code execution vulnerability.</p> <p>The vulnerability is not directly exploitable with the module alone, but multiple serious exploit paths exist with other contributed modules. At least one known exploit path does not require authentication. Custom code may also expose the vulnerable functionality.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/entity_list</p> <p>The Entity List module provides a way to create lists of entities without Views.</p> <p>The module has a remote code execution vulnerability.</p> <p>The vulnerability is not directly exploitable with the module alone, but multiple serious exploit paths exist with other contributed modules. At least one known exploit path does not require authentication. Custom code may also expose the vulnerable functionality.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-218 https://db.gcve.eu/vuln/fkie_cve-2026-108099 <p>Use of Externally-Controlled Input to Select Classes or Code (&#39;Unsafe Reflection&#39;) vulnerability in Drupal Entity List allows Reflection Injection. This issue affects Entity List versions: from 0.0.0 to 3.0.10.</p> <p>Use of Externally-Controlled Input to Select Classes or Code (&#39;Unsafe Reflection&#39;) vulnerability in Drupal Entity List allows Reflection Injection. This issue affects Entity List versions: from 0.0.0 to 3.0.10.</p> https://db.gcve.eu/vuln/fkie_cve-2026-108099 https://db.gcve.eu/vuln/ghsa-9xvr-v24x-c9rf <p>Use of Externally-Controlled Input to Select Classes or Code (&#39;Unsafe Reflection&#39;) vulnerability in Drupal Entity List allows Reflection Injection. This issue affects Entity List versions: from 0.0.0 to 3.0.10.</p> <p>Use of Externally-Controlled Input to Select Classes or Code (&#39;Unsafe Reflection&#39;) vulnerability in Drupal Entity List allows Reflection Injection. This issue affects Entity List versions: from 0.0.0 to 3.0.10.</p> https://db.gcve.eu/vuln/ghsa-9xvr-v24x-c9rf https://db.gcve.eu/vuln/ncsc-2026-0438 NCSC-2026-0438 https://db.gcve.eu/vuln/ncsc-2026-0438 https://db.gcve.eu/vuln/wid-sec-w-2026-3968 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-3968