Update drupal vulnerabilities list (incomplete)

I'm getting back on the wagon for these, but I will probably limit
myself to only Drupal and Wordpress core, plus very high profile web
vulnerabilities. Anyone willing to help please step up to the plate.