Drupal 8.1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:drupal:drupal:8.1.0:*:*:*:*:*:*:*
part: a version: 8.1.0 update: *
| Vendor | Drupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de) |
|---|---|
| Product | Drupal (612296c4-e720-5b7c-a84e-56df4c337089) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:drupal/drupal |
purl2cpe | 2026-06-01 10:11:36.333320 |
pkg:github/drupal/drupal |
purl2cpe | 2026-06-01 10:11:36.333322 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-6919 |
vulnerable | 2026-06-08 05:09:55.159362 |
Details available
Drupal 8 before 8.2.8 and 8.3 before 8.3.1 allows critical access bypass by authenticated users if the RESTful Web Services (rest) module is enabled and the site allows PATCH requests.
Published: 2017-04-20T02:43:00.000Z
Updated: 2024-08-05T15:49:02.380Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6381 |
vulnerable | 2026-06-08 05:09:51.189889 |
Details available
A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution. This is mitigated by the default .htaccess protection against PHP execution, and the fact that Composer development dependencies aren't normal installed. You might be vulnerable to this if you are running a version of Drupal before 8.2.2. To be sure you aren't vulnerable, you can remove the <siteroot>/vendor/phpunit directory from your production deployments
Published: 2017-03-16T14:00:00.000Z
Updated: 2024-08-05T15:25:49.286Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9452 |
vulnerable | 2026-06-08 05:08:23.920376 |
Details available
The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL.
Published: 2016-11-25T18:00:00.000Z
Updated: 2024-08-06T02:50:38.539Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9450 |
vulnerable | 2026-06-08 05:08:23.916824 |
Details available
The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context.
Published: 2016-11-25T18:00:00.000Z
Updated: 2024-08-06T02:50:38.330Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9449 |
vulnerable | 2026-06-08 05:08:23.873411 |
Details available
The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags.
Published: 2016-11-25T18:00:00.000Z
Updated: 2024-08-06T02:50:38.506Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7572 |
vulnerable | 2026-06-08 05:08:13.102531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7571 |
vulnerable | 2026-06-08 05:08:13.101024 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7570 |
vulnerable | 2026-06-08 05:08:13.093762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6212 |
vulnerable | 2026-06-08 05:07:59.218078 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.