https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T06:59:04.478538+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-11029 bdu:2024-11029 2026-10-05T06:59:04.583245+00:00 bdu:2024-11029 https://cve.radiocsirt.org/vuln/bit-drupal-2024-12393 BIT-drupal-2024-12393 — Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2024-003 2026-10-05T06:59:04.583307+00:00

Affected: Bitnami: drupal

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.

 https://cve.radiocsirt.org/vuln/euvd-2026-206803 EUVD-2026-206803 2026-10-05T06:59:04.583371+00:00 EUVD-2026-206803 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12393 fkie_cve-2024-12393 2026-10-05T06:59:04.583396+00:00

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.

 https://cve.radiocsirt.org/vuln/ghsa-8mvq-8h2v-j9vf GHSA-8mvq-8h2v-j9vf — Drupal Core Cross-Site Scripting (XSS) 2026-10-05T06:59:04.583435+00:00

Affected: Packagist: drupal/core, Packagist: drupal/core-recommended, Packagist: drupal/drupal

Drupal uses JavaScript to render status messages in some cases and configurations. In certain situations, the status messages are not adequately sanitized. This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-12393 UBUNTU-CVE-2024-12393 2026-10-05T06:59:04.583484+00:00

Affected: Ubuntu:Pro:14.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: drupal7

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3520 WID-SEC-W-2024-3520 — Drupal: Mehrere Schwachstellen 2026-10-05T06:59:04.583508+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen und einen Cross-Site-Scripting-Angriff durchzuführen.