Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*

part: a version: 6.0 update: beta1

VendorDrupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de)
ProductDrupal (612296c4-e720-5b7c-a84e-56df4c337089)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:drupal/drupal purl2cpe 2026-06-01 10:11:36.219511
pkg:github/drupal/drupal purl2cpe 2026-06-01 10:11:36.219512

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-3171 vulnerable 2026-06-08 05:07:44.931263 Details available
Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3169 vulnerable 2026-06-08 05:07:44.843374 Details available
The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or custom code that calls the user_save function with an explicit category and loads all roles into the array.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3168 vulnerable 2026-06-08 05:07:44.840448 Details available
The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability."
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3166 vulnerable 2026-06-08 05:07:44.836915 Details available
CRLF injection vulnerability in the drupal_set_header function in Drupal 6.x before 6.38, when used with PHP before 5.1.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by leveraging a module that allows user-submitted data to appear in HTTP headers.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:58.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3165 vulnerable 2026-06-08 05:07:44.835380 Details available
The Form API in Drupal 6.x before 6.38 ignores access restrictions on submit buttons, which might allow remote attackers to bypass intended access restrictions by leveraging permission to submit a form with a button that has "#access" set to FALSE in the server-side form definition.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.390Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3164 vulnerable 2026-06-08 05:07:44.806699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3163 vulnerable 2026-06-08 05:07:44.769962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6661 vulnerable 2026-06-08 05:06:52.856869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6660 vulnerable 2026-06-08 05:06:52.852696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6658 vulnerable 2026-06-08 05:06:52.799275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3234 vulnerable 2026-06-08 05:06:37.701614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2750 vulnerable 2026-06-08 05:06:35.755442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2749 vulnerable 2026-06-08 05:06:35.699919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5267 vulnerable 2026-06-08 05:05:47.375125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5266 vulnerable 2026-06-08 05:05:47.372698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5265 vulnerable 2026-06-08 05:05:47.356323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5021 vulnerable 2026-06-08 05:05:46.683418 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5019 vulnerable 2026-06-08 05:05:46.659588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1475 vulnerable 2026-06-08 05:05:24.750573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6386 vulnerable 2026-06-08 05:04:56.376922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6385 vulnerable 2026-06-08 05:04:56.334647 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0245 vulnerable 2026-06-08 05:03:46.444146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0244 vulnerable 2026-06-08 05:03:46.420978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5653 vulnerable 2026-06-08 05:02:57.796815 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5652 vulnerable 2026-06-08 05:02:57.794780 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5651 vulnerable 2026-06-08 05:02:57.769726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2922 vulnerable 2026-06-08 05:02:07.199040 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0826 vulnerable 2026-06-08 05:00:45.675452 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0825 vulnerable 2026-06-08 05:00:45.638094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3686 vulnerable 2026-06-08 04:55:16.280834 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3685 vulnerable 2026-06-08 04:55:16.279785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3094 vulnerable 2026-06-08 04:55:12.691331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3093 vulnerable 2026-06-08 04:55:12.690055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3092 vulnerable 2026-06-08 04:55:12.688480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3091 vulnerable 2026-06-08 04:55:12.651332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4370 vulnerable 2026-06-08 04:51:48.266228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4369 vulnerable 2026-06-08 04:51:48.255250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2373 vulnerable 2026-06-08 04:51:28.057065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1576 vulnerable 2026-06-08 04:51:24.062583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1575 vulnerable 2026-06-08 04:51:24.053420 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4789 vulnerable 2026-06-08 04:50:48.173846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6752 vulnerable 2026-06-08 04:50:09.789361 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.