{type} page" permission to access unpublished. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable.
Privilege Escalation
Restrict Node Page View
NVD
CVSS 2.0
3.5
EPSS
0.2%
Cross-site scripting (XSS) vulnerability in the Hashcash module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.2 for Drupal, when "Log failed hashcash" is enabled, allows remote attackers to inject. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable.
XSS
Hashcash
NVD
CVSS 2.0
2.6
EPSS
0.4%
Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity.
Python
Information Disclosure
Keyring
NVD
CVSS 2.0
2.1
EPSS
0.1%