Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:06:15 +0000 certfr-2026-avi-0889 — De multiples vulnérabilités ont été découvertes dans Drupal. Elles permettent à un attaquant de provoquer une atteinte… https://cve.radiocsirt.org/vuln/certfr-2026-avi-0889 certfr-2026-avi-0889 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0889 EUVD-2026-359205 https://cve.radiocsirt.org/vuln/euvd-2026-359205 EUVD-2026-359205 https://cve.radiocsirt.org/vuln/euvd-2026-359205 fkie_cve-2026-15917 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15917 <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.2.*.</p> <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.2.*.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-15917 GHSA-pw57-w545-279f https://cve.radiocsirt.org/vuln/ghsa-pw57-w545-279f <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.2.*.</p> <p>Improper Neutralization of Input During Web Page Generation (&#34;Cross-site Scripting&#34;) vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.2.*.</p> https://cve.radiocsirt.org/vuln/ghsa-pw57-w545-279f WID-SEC-W-2026-2372 — Drupal Core: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2372 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Drupal Core ausnutzen, um Informationen offenzulegen oder einen Cross Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Drupal Core ausnutzen, um Informationen offenzulegen oder einen Cross Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2372