https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 16:31:09 +0000 https://db.gcve.eu/vuln/drupal-contrib-2026-186 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/webform_rest</p> <p>This module enables you to retrieve and submit webforms via REST.</p> <p>The module doesn&#39;t sufficiently check permission to webform and webform submission entities when retrieving webform elements or fields.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/webform_rest</p> <p>This module enables you to retrieve and submit webforms via REST.</p> <p>The module doesn&#39;t sufficiently check permission to webform and webform submission entities when retrieving webform elements or fields.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-186 https://db.gcve.eu/vuln/fkie_cve-2026-96391 <p>Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1.</p> <p>Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1.</p> https://db.gcve.eu/vuln/fkie_cve-2026-96391 https://db.gcve.eu/vuln/ghsa-pp56-wg7c-j5hh <p>Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1.</p> <p>Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1.</p> https://db.gcve.eu/vuln/ghsa-pp56-wg7c-j5hh https://db.gcve.eu/vuln/wid-sec-w-2026-3554 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-3554