Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:drupal:7.x-dev:*:*:*:*:*:*:*

part: a version: 7.x-dev update: *

VendorDrupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de)
ProductDrupal (612296c4-e720-5b7c-a84e-56df4c337089)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:drupal/drupal purl2cpe 2026-06-01 10:11:36.273231
pkg:github/drupal/drupal purl2cpe 2026-06-01 10:11:36.273233

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-6212 vulnerable 2026-06-08 05:07:59.192033 Details available
The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors.
Published: 2016-09-09T14:00:00.000Z
Updated: 2024-08-06T01:22:20.758Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6211 vulnerable 2026-06-08 05:07:59.189880 Details available
The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form.
Published: 2016-09-09T14:00:00.000Z
Updated: 2024-08-06T01:22:20.748Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3170 vulnerable 2026-06-08 05:07:44.882853 Details available
The "have you forgotten your password" links in the User module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allow remote attackers to obtain sensitive username information by leveraging a configuration that permits using an email address to login and a module that permits logging in.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.384Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3169 vulnerable 2026-06-08 05:07:44.845124 Details available
The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or custom code that calls the user_save function with an explicit category and loads all roles into the array.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3168 vulnerable 2026-06-08 05:07:44.842392 Details available
The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability."
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3164 vulnerable 2026-06-08 05:07:44.811005 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3163 vulnerable 2026-06-08 05:07:44.805561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3162 vulnerable 2026-06-08 05:07:44.763088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6665 vulnerable 2026-06-08 05:06:52.893100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6661 vulnerable 2026-06-08 05:06:52.858624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6660 vulnerable 2026-06-08 05:06:52.855921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6659 vulnerable 2026-06-08 05:06:52.851863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6658 vulnerable 2026-06-08 05:06:52.850141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5266 vulnerable 2026-06-08 05:05:47.374321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5265 vulnerable 2026-06-08 05:05:47.371114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5022 vulnerable 2026-06-08 05:05:46.685483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5021 vulnerable 2026-06-08 05:05:46.683385 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5020 vulnerable 2026-06-08 05:05:46.681850 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5019 vulnerable 2026-06-08 05:05:46.658532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6389 vulnerable 2026-06-08 05:04:56.381076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6388 vulnerable 2026-06-08 05:04:56.379905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6387 vulnerable 2026-06-08 05:04:56.378787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6386 vulnerable 2026-06-08 05:04:56.376888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6385 vulnerable 2026-06-08 05:04:56.375349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0316 vulnerable 2026-06-08 05:03:47.034351 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0246 vulnerable 2026-06-08 05:03:46.446693 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0245 vulnerable 2026-06-08 05:03:46.445576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0244 vulnerable 2026-06-08 05:03:46.418799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5653 vulnerable 2026-06-08 05:02:57.796746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5651 vulnerable 2026-06-08 05:02:57.794129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2153 vulnerable 2026-06-08 05:00:53.048194 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1591 vulnerable 2026-06-08 05:00:49.760583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1590 vulnerable 2026-06-08 05:00:49.759557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1589 vulnerable 2026-06-08 05:00:49.758576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1588 vulnerable 2026-06-08 05:00:49.757526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0827 vulnerable 2026-06-08 05:00:45.683782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0826 vulnerable 2026-06-08 05:00:45.682798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0825 vulnerable 2026-06-08 05:00:45.674721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6752 vulnerable 2026-06-08 04:50:09.823294 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.