HUTECH HUTECH::ANMCLB An ninh mạng HUTECH

CVE mới & PoC public

CVE từ NVD, PoC từ GitHub, đánh dấu KEV theo danh sách CISA. Cập nhật 8 giờ trước.

PoC mới public →
7 ngày qua: Nghiêm trọng · 217Cao · 1090Trung bình · 1150Thấp · 209 Chưa chấm · 327

3038 CVE

  • CVE-2026-96374 Chưa chấm CWE-352 22/10 09:17

    Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue affects Project Browser versions: from 0.0.0 to 2.0.3, from 2.1.0 to 2.1.5.

  • CVE-2026-96373 Chưa chấm CWE-863 22/10 09:17

    Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  • CVE-2026-96372 Chưa chấm CWE-1220 22/10 09:17

    Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  • CVE-2026-96371 Chưa chấm CWE-267 22/10 09:17

    Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  • CVE-2026-96370 Chưa chấm CWE-863 22/10 09:17

    Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  • CVE-2026-96369 Chưa chấm CWE-525 22/10 09:17

    Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  • CVE-2026-96368 Chưa chấm CWE-79 22/10 09:17

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  • CVE-2026-96367 Chưa chấm CWE-267 22/10 09:17

    Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  • CVE-2026-96366 Chưa chấm CWE-863 22/10 09:17

    Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  • CVE-2026-96365 Chưa chấm CWE-770 22/10 09:17

    Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  • CVE-2026-96364 Chưa chấm CWE-799 22/10 09:17

    Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  • CVE-2026-96363 Chưa chấm CWE-267 22/10 09:17

    Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  • CVE-2026-96362 Chưa chấm CWE-79 22/10 09:17

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  • CVE-2026-96361 Chưa chấm CWE-79 22/10 09:17

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

  • CVE-2026-96360 Chưa chấm CWE-79 22/10 09:17

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

Xem thêm ↓

PoC mới nhất