Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*

part: a version: 7.18 update: *

VendorDrupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de)
ProductDrupal (612296c4-e720-5b7c-a84e-56df4c337089)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:drupal/drupal purl2cpe 2026-06-01 10:11:36.243440
pkg:github/drupal/drupal purl2cpe 2026-06-01 10:11:36.243441

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9451 vulnerable 2026-06-08 05:08:23.918457 Details available
Confirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduct open redirect attacks via unspecified vectors.
Published: 2016-11-25T18:00:00.000Z
Updated: 2024-08-06T02:50:38.351Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9449 vulnerable 2026-06-08 05:08:23.899848 Details available
The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags.
Published: 2016-11-25T18:00:00.000Z
Updated: 2024-08-06T02:50:38.506Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6212 vulnerable 2026-06-08 05:07:59.191589 Details available
The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors.
Published: 2016-09-09T14:00:00.000Z
Updated: 2024-08-06T01:22:20.758Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6211 vulnerable 2026-06-08 05:07:59.175671 Details available
The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form.
Published: 2016-09-09T14:00:00.000Z
Updated: 2024-08-06T01:22:20.748Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3170 vulnerable 2026-06-08 05:07:44.846703 Details available
The "have you forgotten your password" links in the User module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allow remote attackers to obtain sensitive username information by leveraging a configuration that permits using an email address to login and a module that permits logging in.
Published: 2016-04-12T15:00:00.000Z
Updated: 2024-08-05T23:47:57.384Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3169 vulnerable 2026-06-08 05:07:44.844733 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3168 vulnerable 2026-06-08 05:07:44.841765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3164 vulnerable 2026-06-08 05:07:44.810532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3163 vulnerable 2026-06-08 05:07:44.798997 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3162 vulnerable 2026-06-08 05:07:44.745207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7943 vulnerable 2026-06-08 05:07:02.405564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6665 vulnerable 2026-06-08 05:06:52.892795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6661 vulnerable 2026-06-08 05:06:52.858296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6660 vulnerable 2026-06-08 05:06:52.855576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6659 vulnerable 2026-06-08 05:06:52.851437 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6658 vulnerable 2026-06-08 05:06:52.840553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3234 vulnerable 2026-06-08 05:06:37.717103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3233 vulnerable 2026-06-08 05:06:37.700593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3232 vulnerable 2026-06-08 05:06:37.699024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3231 vulnerable 2026-06-08 05:06:37.691013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2750 vulnerable 2026-06-08 05:06:35.756834 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2749 vulnerable 2026-06-08 05:06:35.744816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5267 vulnerable 2026-06-08 05:05:47.376404 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5266 vulnerable 2026-06-08 05:05:47.374107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5265 vulnerable 2026-06-08 05:05:47.365495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5022 vulnerable 2026-06-08 05:05:46.685304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5021 vulnerable 2026-06-08 05:05:46.683204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5020 vulnerable 2026-06-08 05:05:46.681661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5019 vulnerable 2026-06-08 05:05:46.652779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1476 vulnerable 2026-06-08 05:05:24.770213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1475 vulnerable 2026-06-08 05:05:24.746131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6389 vulnerable 2026-06-08 05:04:56.380982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6388 vulnerable 2026-06-08 05:04:56.379814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6387 vulnerable 2026-06-08 05:04:56.378688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6386 vulnerable 2026-06-08 05:04:56.376784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6385 vulnerable 2026-06-08 05:04:56.372135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0316 vulnerable 2026-06-08 05:03:47.029834 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0246 vulnerable 2026-06-08 05:03:46.446677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0245 vulnerable 2026-06-08 05:03:46.445559 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0244 vulnerable 2026-06-08 05:03:46.418325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.