CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 04/11/2026 |
| CVE-2026-121927 | MOYENNE6.3 | A vulnerability has been found in InfiniFlow RAGFlow up to 0.27.3. Affected by this issue is the function _account_get of the file common/data_source/seafile_connector.py of the component Seafile Connector. Such manipulation of the argument seafile_url leads to server-side request forgery. The attack can be executed re | 04/11/2026 |
| CVE-2026-122079 | The htmLawed module enables use of the [htmLawed](https://bioinformatics.org/phplabware/internal_utilities/htmLawed/index.php "htmLawed website") PHP library as a filter in a Text Format for restriction/filtering of HTML in textual input. | 04/11/2026 |
| CVE-2026-122080 | The htmLawed module enables use of the [htmLawed](https://bioinformatics.org/phplabware/internal_utilities/htmLawed/index.php) PHP library as a filter in a Text Format for restriction/filtering of HTML in textual input. | 04/11/2026 |
| CVE-2026-122081 | Islandora does not sufficiently check file update access when processing media source and derivative uploads. A user with permission to update media or create derivatives can submit a crafted request to overwrite files they are not authorized to modify, including private files. | 04/11/2026 |
| CVE-2026-122082 | The Mime Mail module gives Drupal sites the ability to send HTML email messages. | 04/11/2026 |
| CVE-2026-122083 | This module integrates the Site Catalyst or AdobeAnalytics software into a Drupal site. | 04/11/2026 |
| CVE-2026-122084 | The WordsOnline Connector module integrates Drupal with the WordsOnline translation service through the TMGMT module. | 04/11/2026 |
| CVE-2026-122078 | The Extended HTML Filter module allows using style attributes in CKEditor. | 04/11/2026 |
| CVE-2026-122077 | The Allowed Languages module makes it possible to set restrictions on which content a user can edit based on language. | 04/11/2026 |
| CVE-2026-122076 | This module provides a separate page with a form for users to change their own password, which asks for the current password before accepting a new one. | 04/11/2026 |
| CVE-2026-122075 | This module enables you to schedule content to be published or unpublished at a certain time in the future. | 04/11/2026 |
| CVE-2026-122074 | This module enables you to reset passwords via one time passcode to email or SMS rather than reset password links. | 04/11/2026 |
| CVE-2026-122073 | The Name Field module provides a field for storing a personal name as separate components. | 04/11/2026 |
| CVE-2026-122072 | This module allows forums to be set private and to be given moderators. | 04/11/2026 |
| CVE-2026-122071 | This module enables you to accept payments through Escrow.com with Drupal Commerce. | 04/11/2026 |
| CVE-2026-122070 | This module lets customers replace an item in their cart with one of the alternative product variations listed for it. | 04/11/2026 |
| CVE-2026-122069 | The AlternativeCommerce PayPal Checkout module provides an AlternativeCommerce method to embed payment services from PayPal. | 04/11/2026 |