https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:28:31 +0000 https://cve.radiocsirt.org/vuln/drupal-contrib-2026-108 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/datafield</p> <p>This module enables you to store structured data in configurable fields and expose Data Field values through JSON endpoints.</p> <p>The module doesn&#39;t sufficiently check access when returning Data Field values through its JSON endpoint. This may allow anonymous users to access field values belonging to entities they cannot otherwise view, including unpublished content.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/datafield</p> <p>This module enables you to store structured data in configurable fields and expose Data Field values through JSON endpoints.</p> <p>The module doesn&#39;t sufficiently check access when returning Data Field values through its JSON endpoint. This may allow anonymous users to access field values belonging to entities they cannot otherwise view, including unpublished content.</p> https://cve.radiocsirt.org/vuln/drupal-contrib-2026-108 https://cve.radiocsirt.org/vuln/euvd-2026-363303 EUVD-2026-363303 https://cve.radiocsirt.org/vuln/euvd-2026-363303 https://cve.radiocsirt.org/vuln/fkie_cve-2026-81269 <p>Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.</p> <p>Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-81269 https://cve.radiocsirt.org/vuln/ghsa-rq35-w8f7-p43g <p>Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.</p> <p>Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.</p> https://cve.radiocsirt.org/vuln/ghsa-rq35-w8f7-p43g https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3041 <p>Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, sensible Informationen offenzulegen, Daten zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Sicherheitsmaßnahmen zu umgehen, sensible Informationen offenzulegen, Daten zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3041