CVE-2025-36513

Cross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co., Ltd.. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2025-36513

creationtimestamp| type| source ---|---|--- 2025-06-06 09:14:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwioqvnlc2e...

JVN#10964289: Multiple surveillance cameras provided by i-PRO Co., Ltd. vulnerable to cross-site request forgery

Multiple surveillance cameras provided by i-PRO Co., Ltd. contain the following vulnerability. Cross-Site Request Forgery CSRF CWE-352 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 5.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Base Score 4.3 CVE-2025-36513 Impact I...

CVE-2024-36513

A privilege context switching error vulnerability CWE-270 in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts...

CVE-2021-36513

An issue was discovered in function sofiahandlesipinotify in sofia.c in SignalWire freeswitch before 1.10.6, may allow attackers to view sensitive information due to an uninitialized value...

CVE-2020-36513

An issue was discovered in the accreader crate through 2020-12-27 for Rust. readupto may read from uninitialized memory locations...

CVE-2024-36513

creationtimestamp| type| source ---|---|--- 2024-11-12 19:25:41+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113471621703891497 2026-07-20 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr3q46cmql2u...

CVE-2024-36513

A privilege context switching error vulnerability CWE-270 in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts...

CVE-2023-36513

creationtimestamp| type| source ---|---|--- 2023-07-17 18:40:24+00:00| seen| https://t.me/cibsecurity/66826...

CVE-2023-36513

Cross-Site Request Forgery CSRF vulnerability in WooCommerce AutomateWoo plugin = 5.7.5 versions...

CVE-2023-36513 WordPress AutomateWoo Plugin <= 5.7.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WooCommerce AutomateWoo plugin = 5.7.5 versions...

CVE-2023-36513

CVE-2023-36513 affects the WordPress WooCommerce AutomateWoo plugin, vulnerable versions are

WordPress AutomateWoo Plugin <= 5.7.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software AutomateWoo Type Plugin Vulnerable versions = 5.7.5 Fixed in 5.7.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-36513 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID baa4f71a9406 Credits Rafie Muhammad Patchsta...

CVE-2022-36513

creationtimestamp| type| source ---|---|--- 2022-08-25 18:23:24+00:00| seen| https://t.me/cibsecurity/48721...

CVE-2022-36513

CVE-2022-36513 affects the H3C GR-1200W MiniGRW1A0V100R006. The vulnerability is a stack overflow in the edditactionlist() function exposed on the device, with CVSS v3.1 metrics showing NETWORK access, no user interaction, and high impact (C/H, I/H, A/H), base score 9.8 (CRITICAL). Exploitation s...

CVE-2022-36513

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist...

CVE-2020-36513

CVE-2020-36513 concerns the Rust crate acc_reader (up to 2020-12-27) where the read_up_to function may read from uninitialized memory locations. Multiple connected advisories (including GHSA entries and national/DNS variants) describe uninitialized buffers being exposed through Read implementatio...

CVE-2021-36513

creationtimestamp| type| source ---|---|--- 2021-10-18 20:31:59+00:00| seen| https://t.me/cibsecurity/30722...

CVE-2021-36513

FreeSWITCH (SignalWire Freeswitch) prior to version 1.10.6 contains a vulnerability in sofia_handle_sip_i_notify where an uninitialized value can lead to information disclosure. Upgrading to 1.10.6 or later (as indicated by the referenced release) is the documented remediation. The CVE is corrobo...

Denial of Service Vulnerability in D-Link DIR-809 (CNVD-2021-36513)

The D-Link DIR-809 is a wireless router that uses RTOS. A denial of service vulnerability exists in the D-Link DIR-809, which can be exploited by attackers to cause a denial of service attack...