CVE-2019-5974

Cross-site request forgery CSRF vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-5960

Cross-site request forgery CSRF vulnerability in WP Open Graph 1.6.1 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-5963

Cross-site request forgery CSRF vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-5973

CVE-2019-5973 is a CSRF vulnerability in the WordPress Plugin “Online Lesson Booking” that affects version 0.8.6 and earlier. The flaw allows remote attackers to hijack an administrator’s authenticated session via unspecified vectors, potentially enabling unintended actions while the administrato...

CVE-2019-5983: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-1879

A vulnerability in the CLI of Cisco Integrated Management Controller IMC could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient validation of user-supplied input at the CLI. An attacker could explo...

CVE-2019-10048

The ImageMagick plugin that is installed by default in Pydio through 8.2.2 does not perform the appropriate validation and sanitization of user supplied input in the plugin's configuration options, allowing arbitrary shell commands to be entered that result in command execution on the underlying...

CVE-2019-5920

Cross-site request forgery CSRF vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page...

PT-2019-17862

Name of the Vulnerable Software and Affected Versions FormCraft versions 1.2.1 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via a specially crafted page. Recommendations For FormCraft versions 1.2.1 and...

WEM 4.6 - Error accessing to the admin console: "You are not registered as a Workspace Environment Management administrator."

Error while connecting to WEM admin console: "You are not registered as a Workspace Environment Management Administrator. Therefore, you are not allowed to access the service. Please contact your Workspace Environment Management Administrator to gain access."...

Apple macOS High Sierra Security Logic Flaw Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple Inc. for Mac computers.Security is one of the security components of the system. A security vulnerability exists in the authentication of credentials in the Security component of Apple macOS High Sierra version 10.13.2. ...

CVE-2018-0647

Cross-site request forgery CSRF vulnerability in WL-330NUL Firmware version prior to 3.0.0.46 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

PT-2018-18723

Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.8.5-3471 Synology Photo Station versions prior to 6.3-2975 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators. This can be...

CVE-2018-0520

Cross-site request forgery CSRF vulnerability in FS010W firmware FS010W00V1.3.0 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors...

CVE-2018-0509

Cross-site request forgery CSRF vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors...

Authentication flaw

Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated administrator to access the device without entering user credentials. The authentication record is stored on the device; thus if an administrator authenticates from a NAT network, the...

CVE-2017-17746

Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated administrator to access the device without entering user credentials. The authentication record is stored on the device; thus if an administrator authenticates from a NAT network, the...

Apple Mac OS X Security Updates (HT208331)-04

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

About the security content of Security Update 2017-001 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

ZKTeco ZKTime Web Cross-Site Request Forgery Vulnerability

ZKTime Web is a web-based time and attendance software that provides stable communication to the device via GPRS/WAN, so users can access the software from anywhere via a web browser and can remotely manage hundreds of T&A terminals WLAN under complex network conditions. A cross-site request...