Drupal — система управления контентом с открытым исходным кодом. На Drupal работает более миллиона сайтов — от личных блогов до сайтов компаний, политических партий и государственных организаций.
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 030
CVE-2016-3170
The "have you forgotten your password" links in the User module in Dru ...
CVE-2016-3163
The XML-RPC system in Drupal 6.x before 6.38 and 7.x before 7.43 might ...
CVE-2016-3169
The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows r ...
CVE-2016-3165
The Form API in Drupal 6.x before 6.38 ignores access restrictions on ...
CVE-2016-3167
Open redirect vulnerability in the drupal_goto function in Drupal 6.x ...
CVE-2016-3164
Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might al ...
CVE-2016-3171
Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before ...
CVE-2016-3162
The File module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allows ...
CVE-2016-3166
CRLF injection vulnerability in the drupal_set_header function in Drup ...
CVE-2016-3165
The Form API in Drupal 6.x before 6.38 ignores access restrictions on submit buttons, which might allow remote attackers to bypass intended access restrictions by leveraging permission to submit a form with a button that has "#access" set to FALSE in the server-side form definition.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2016-3170 The "have you forgotten your password" links in the User module in Dru ... | CVSS3: 5.3 | 2% Низкий | больше 10 лет назад |
| CVE-2016-3163 The XML-RPC system in Drupal 6.x before 6.38 and 7.x before 7.43 might ... | CVSS3: 7.5 | 1% Низкий | больше 10 лет назад |
| CVE-2016-3169 The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows r ... | CVSS3: 8.1 | 2% Низкий | больше 10 лет назад |
| CVE-2016-3165 The Form API in Drupal 6.x before 6.38 ignores access restrictions on ... | CVSS3: 7.5 | 1% Низкий | больше 10 лет назад |
| CVE-2016-3167 Open redirect vulnerability in the drupal_goto function in Drupal 6.x ... | CVSS3: 7.4 | 1% Низкий | больше 10 лет назад |
| CVE-2016-3164 Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might al ... | CVSS3: 7.4 | 2% Низкий | больше 10 лет назад |
| CVE-2016-3171 Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before ... | CVSS3: 8.1 | 3% Низкий | больше 10 лет назад |
| CVE-2016-3162 The File module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allows ... | CVSS3: 8.1 | 2% Низкий | больше 10 лет назад |
| CVE-2016-3166 CRLF injection vulnerability in the drupal_set_header function in Drup ... | CVSS3: 5.9 | 1% Низкий | больше 10 лет назад |
 | CVE-2016-3165 The Form API in Drupal 6.x before 6.38 ignores access restrictions on submit buttons, which might allow remote attackers to bypass intended access restrictions by leveraging permission to submit a form with a button that has "#access" set to FALSE in the server-side form definition. | CVSS3: 7.5 | 1% Низкий | больше 10 лет назад |
Уязвимостей на страницу