Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*

part: a version: 6.1 update: *

VendorDrupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de)
ProductDrupal (612296c4-e720-5b7c-a84e-56df4c337089)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:drupal/drupal purl2cpe 2026-06-01 10:11:36.227908
pkg:github/drupal/drupal purl2cpe 2026-06-01 10:11:36.227909

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-3171 vulnerable 2026-06-08 05:07:44.931411 Details available
Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3169 vulnerable 2026-06-08 05:07:44.843521 Details available
The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or custom code that calls the user_save function with an explicit category and loads all roles into the array.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3168 vulnerable 2026-06-08 05:07:44.840605 Details available
The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability."
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3167 vulnerable 2026-06-08 05:07:44.838598 Details available
Open redirect vulnerability in the drupal_goto function in Drupal 6.x before 6.38, when used with PHP before 5.4.7, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a double-encoded URL in the "destination" parameter.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:58.013Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3166 vulnerable 2026-06-08 05:07:44.837060 Details available
CRLF injection vulnerability in the drupal_set_header function in Drupal 6.x before 6.38, when used with PHP before 5.1.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by leveraging a module that allows user-submitted data to appear in HTTP headers.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:58.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3165 vulnerable 2026-06-08 05:07:44.835539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3164 vulnerable 2026-06-08 05:07:44.806860 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3163 vulnerable 2026-06-08 05:07:44.776317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6661 vulnerable 2026-06-08 05:06:52.856966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6660 vulnerable 2026-06-08 05:06:52.852849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6658 vulnerable 2026-06-08 05:06:52.803882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3234 vulnerable 2026-06-08 05:06:37.701774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2750 vulnerable 2026-06-08 05:06:35.755601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2749 vulnerable 2026-06-08 05:06:35.705007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5267 vulnerable 2026-06-08 05:05:47.375285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5266 vulnerable 2026-06-08 05:05:47.372846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5265 vulnerable 2026-06-08 05:05:47.356476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5021 vulnerable 2026-06-08 05:05:46.683568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5019 vulnerable 2026-06-08 05:05:46.664131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1475 vulnerable 2026-06-08 05:05:24.758158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6386 vulnerable 2026-06-08 05:04:56.377074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6385 vulnerable 2026-06-08 05:04:56.339391 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0245 vulnerable 2026-06-08 05:03:46.444418 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0244 vulnerable 2026-06-08 05:03:46.426643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5653 vulnerable 2026-06-08 05:02:57.796963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5652 vulnerable 2026-06-08 05:02:57.794938 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5651 vulnerable 2026-06-08 05:02:57.774951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2922 vulnerable 2026-06-08 05:02:07.203393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0826 vulnerable 2026-06-08 05:00:45.675617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0825 vulnerable 2026-06-08 05:00:45.644204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3686 vulnerable 2026-06-08 04:55:16.280982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3685 vulnerable 2026-06-08 04:55:16.279944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3094 vulnerable 2026-06-08 04:55:12.691476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3093 vulnerable 2026-06-08 04:55:12.690226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3092 vulnerable 2026-06-08 04:55:12.688640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3091 vulnerable 2026-06-08 04:55:12.657067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4370 vulnerable 2026-06-08 04:51:48.266366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4369 vulnerable 2026-06-08 04:51:48.259198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2373 vulnerable 2026-06-08 04:51:28.057225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1844 vulnerable 2026-06-08 04:51:25.256987 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1576 vulnerable 2026-06-08 04:51:24.062713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1575 vulnerable 2026-06-08 04:51:24.057218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6533 vulnerable 2026-06-08 04:50:55.273202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6532 vulnerable 2026-06-08 04:50:55.271114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6171 vulnerable 2026-06-08 04:50:54.397912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6170 vulnerable 2026-06-08 04:50:54.395287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4789 vulnerable 2026-06-08 04:50:48.178353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3745 vulnerable 2026-06-08 04:50:36.248970 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3744 vulnerable 2026-06-08 04:50:36.248540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3743 vulnerable 2026-06-08 04:50:36.247772 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3742 vulnerable 2026-06-08 04:50:36.247051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3741 vulnerable 2026-06-08 04:50:36.246392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3740 vulnerable 2026-06-08 04:50:36.244637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6752 vulnerable 2026-06-08 04:50:09.796353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.