CVE-2025-36513

Cross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co., Ltd.. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2025-36513

creationtimestamp| type| source ---|---|--- 2025-06-06 09:14:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwioqvnlc2e...

JVN#10964289: Multiple surveillance cameras provided by i-PRO Co., Ltd. vulnerable to cross-site request forgery

Multiple surveillance cameras provided by i-PRO Co., Ltd. contain the following vulnerability. Cross-Site Request Forgery CSRF CWE-352 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 5.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Base Score 4.3 CVE-2025-36513 Impact I...

CVE-2024-36513

A privilege context switching error vulnerability CWE-270 in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts...

CVE-2021-36513

An issue was discovered in function sofiahandlesipinotify in sofia.c in SignalWire freeswitch before 1.10.6, may allow attackers to view sensitive information due to an uninitialized value...

CVE-2020-36513

An issue was discovered in the accreader crate through 2020-12-27 for Rust. readupto may read from uninitialized memory locations...

CVE-2024-36513

creationtimestamp| type| source ---|---|--- 2024-11-12 19:25:41+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113471621703891497...

CVE-2024-36513

A privilege context switching error vulnerability CWE-270 in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts...

CVE-2023-36513

creationtimestamp| type| source ---|---|--- 2023-07-17 18:40:24+00:00| seen| https://t.me/cibsecurity/66826...

CVE-2023-36513

Cross-Site Request Forgery CSRF vulnerability in WooCommerce AutomateWoo plugin = 5.7.5 versions...

CVE-2023-36513

CVE-2023-36513 affects the WordPress WooCommerce AutomateWoo plugin, vulnerable versions are

CVE-2023-36513 WordPress AutomateWoo Plugin <= 5.7.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WooCommerce AutomateWoo plugin = 5.7.5 versions...

WordPress AutomateWoo Plugin <= 5.7.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software AutomateWoo Type Plugin Vulnerable versions = 5.7.5 Fixed in 5.7.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-36513 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID baa4f71a9406 Credits Rafie Muhammad Patchsta...

CVE-2022-36513

creationtimestamp| type| source ---|---|--- 2022-08-25 18:23:24+00:00| seen| https://t.me/cibsecurity/48721...

CVE-2022-36513

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist...

CVE-2022-36513

CVE-2022-36513 affects the H3C GR-1200W MiniGRW1A0V100R006. The vulnerability is a stack overflow in the edditactionlist() function exposed on the device, with CVSS v3.1 metrics showing NETWORK access, no user interaction, and high impact (C/H, I/H, A/H), base score 9.8 (CRITICAL). Exploitation s...

kari (=0.1.0), soos-sample-project (=1.0.1) potentially affected by CVE-2020-36513 +1 more via acc_reader (=2.0.0)

accreader CARGO version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on accreader and may be impacted: - kari =0.1.0 - soos-sample-project =1.0.1 Source cves: CVE-2020-36513, CVE-2020-36514 Source advisory: OSV:GHSA-HV9V-7W3V-RJ6F...

kari (=0.1.0), soos-sample-project (=1.0.1) potentially affected by CVE-2020-36513 +1 more via acc_reader (=2.0.0)

accreader CARGO version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on accreader and may be impacted: - kari =0.1.0 - soos-sample-project =1.0.1 Source cves: CVE-2020-36513, CVE-2020-36514 Source advisory: OSV:GHSA-799F-R78P-GQ9C...

CVE-2020-36513

CVE-2020-36513 concerns the Rust crate acc_reader (up to 2020-12-27) where the read_up_to function may read from uninitialized memory locations. Multiple connected advisories (including GHSA entries and national/DNS variants) describe uninitialized buffers being exposed through Read implementatio...

CVE-2021-36513

creationtimestamp| type| source ---|---|--- 2021-10-18 20:31:59+00:00| seen| https://t.me/cibsecurity/30722...