GCVE - cpe:2.3:a:drupal:drupal:6.34:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:drupal:6.34:*:*:*:*:*:*:*

part: a version: 6.34 update: *

Vendor	Drupal (`5a354f1f-83c2-5c0e-b1bc-3ae1f55812de`)
Product	Drupal (`612296c4-e720-5b7c-a84e-56df4c337089`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:drupal/drupal`	purl2cpe	2026-06-01 10:11:36.227980
`pkg:github/drupal/drupal`	purl2cpe	2026-06-01 10:11:36.227982

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-3171`	vulnerable	2026-06-08 05:07:44.931945	Details available Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation. Published: 2016-04-12T15:00:00.000Z Updated: 2024-08-05T23:47:57.481Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/02/24/19 http://www.openwall.com/lists/oss-security/2016/03/15/10 http://www.debian.org/security/2016/dsa-3498 https://www.drupal.org/SA-CORE-2016-001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-3169`	vulnerable	2026-06-08 05:07:44.844122	Details available The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or custom code that calls the user_save function with an explicit category and loads all roles into the array. Published: 2016-04-12T15:00:00.000Z Updated: 2024-08-05T23:47:57.511Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/02/24/19 http://www.openwall.com/lists/oss-security/2016/03/15/10 http://www.debian.org/security/2016/dsa-3498 https://www.drupal.org/SA-CORE-2016-001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-3168`	vulnerable	2026-06-08 05:07:44.841157	Details available The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability." Published: 2016-04-12T15:00:00.000Z Updated: 2024-08-05T23:47:57.973Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/02/24/19 http://www.openwall.com/lists/oss-security/2016/03/15/10 http://www.debian.org/security/2016/dsa-3498 https://www.drupal.org/SA-CORE-2016-001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-3167`	vulnerable	2026-06-08 05:07:44.839328	Details available Open redirect vulnerability in the drupal_goto function in Drupal 6.x before 6.38, when used with PHP before 5.4.7, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a double-encoded URL in the "destination" parameter. Published: 2016-04-12T15:00:00.000Z Updated: 2024-08-05T23:47:58.013Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/02/24/19 http://www.openwall.com/lists/oss-security/2016/03/15/10 http://www.debian.org/security/2016/dsa-3498 https://www.drupal.org/SA-CORE-2016-001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-3166`	vulnerable	2026-06-08 05:07:44.837674	Details available CRLF injection vulnerability in the drupal_set_header function in Drupal 6.x before 6.38, when used with PHP before 5.1.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by leveraging a module that allows user-submitted data to appear in HTTP headers. Published: 2016-04-12T15:00:00.000Z Updated: 2024-08-05T23:47:58.184Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/02/24/19 http://www.openwall.com/lists/oss-security/2016/03/15/10 http://www.debian.org/security/2016/dsa-3498 https://www.drupal.org/SA-CORE-2016-001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-3165`	vulnerable	2026-06-08 05:07:44.836206	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-3164`	vulnerable	2026-06-08 05:07:44.809917	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-3163`	vulnerable	2026-06-08 05:07:44.796692	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-6661`	vulnerable	2026-06-08 05:06:52.857566	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-6660`	vulnerable	2026-06-08 05:06:52.854846	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-6658`	vulnerable	2026-06-08 05:06:52.821885	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-3234`	vulnerable	2026-06-08 05:06:37.702341	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2750`	vulnerable	2026-06-08 05:06:35.756168	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2749`	vulnerable	2026-06-08 05:06:35.726217	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.