https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 30 Oct 2026 23:16:55 +0000 https://db.gcve.eu/vuln/drupal-contrib-2026-262 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/commerce_shipping</p> <p>This module enables you to sell tangible products via Drupal Commerce that are organized into shipments for fulfillment.</p> <p>The module doesn&#39;t sufficiently check access on the form to resend receipts. Under certain configurations, this allows some users to gain access to receipts and customer information for orders they should not be able to access.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/commerce_shipping</p> <p>This module enables you to sell tangible products via Drupal Commerce that are organized into shipments for fulfillment.</p> <p>The module doesn&#39;t sufficiently check access on the form to resend receipts. Under certain configurations, this allows some users to gain access to receipts and customer information for orders they should not be able to access.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-262 https://db.gcve.eu/vuln/fkie_cve-2026-118557 <p>Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3.0.6.</p> <p>Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3.0.6.</p> https://db.gcve.eu/vuln/fkie_cve-2026-118557 https://db.gcve.eu/vuln/ghsa-rx8q-gw9q-37vf <p>Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3.0.6.</p> <p>Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3.0.6.</p> https://db.gcve.eu/vuln/ghsa-rx8q-gw9q-37vf https://db.gcve.eu/vuln/wid-sec-w-2026-4230 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um erweiterte Berechtigungen zu erlangen und Benutzerkonten zu übernehmen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und nicht näher spezifizierte Auswirkungen zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um erweiterte Berechtigungen zu erlangen und Benutzerkonten zu übernehmen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und nicht näher spezifizierte Auswirkungen zu verursachen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4230