Lucene search
+L

45 matches found

CVE
CVE
•added 2020/10/20 9:20 p.m.•91 views

CVE-2020-5790

CVE-2020-5790 is a CSRF in Nagios XI 5.7.3 that allows an attacker to induce a logged-in user to perform sensitive actions by clicking a crafted link. Affected product: Nagios XI; root cause: cross-site request forgery. Impact: sensitive application operations potentially executed by an authentic...

6.5CVSS6.4AI score0.02254EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/10/20 12:00 a.m.•3 views

PT-2020-18711

Name of the Vulnerable Software and Affected Versions Nagios XI version 5.7.3 Description The issue allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link. This is a result of cross-site request forgery. Recommendations For Nagi...

6.5CVSS0.02254EPSS
SaveExploits1References4
NVD
NVD
•added 2020/10/01 8:15 p.m.•31 views

CVE-2020-5786

Cross-site request forgery in Teltonika firmware TRB2R00.02.04.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

8.8CVSS0.08622EPSS
SaveExploits1References1
Prion
Prion
•added 2020/10/01 8:15 p.m.•25 views

Cross site request forgery (csrf)

Cross-site request forgery in Teltonika firmware TRB2R00.02.04.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

6.8CVSS8.4AI score0.08622EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2020/10/01 7:41 p.m.•64 views

CVE-2020-5786

CVE-2020-5786: A cross-site request forgery in Teltonika firmware TRB2_R_00.02.04.3 lets a remote attacker trick authenticated users into performing sensitive application actions through a crafted link. The consolidated documents confirm the affected product/firmware version and the CSRF nature o...

8.8CVSS8.4AI score0.08622EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/10/01 7:41 p.m.•46 views

CVE-2020-5786

Cross-site request forgery in Teltonika firmware TRB2R00.02.04.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

8.6AI score0.08622EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/01 12:00 a.m.•8 views

CVE-2020-5786: Cross-Site Request Forgery (CSRF)

Cross-site request forgery in Teltonika firmware TRB2R00.02.04.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

8.8CVSS5.8AI score0.08622EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/10/01 12:00 a.m.•4 views

PT-2020-18707

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link. This is achieved through cross-site request forgery...

8.8CVSS0.08622EPSS
SaveExploits1References4
Prion
Prion
•added 2020/08/03 8:15 p.m.•22 views

Cross site request forgery (csrf)

Cross-site request forgery in Teltonika firmware TRB2R00.02.04.01 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

6.8CVSS8.4AI score0.00691EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/08/03 7:57 p.m.•40 views

CVE-2020-5770

Cross-site request forgery in Teltonika firmware TRB2R00.02.04.01 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

8.6AI score0.00691EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/03 12:00 a.m.•6 views

CVE-2020-5770: Cross-Site Request Forgery (CSRF)

Cross-site request forgery in Teltonika firmware TRB2R00.02.04.01 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

8.8CVSS5.8AI score0.00691EPSS
SaveExploits1References2
NVD
NVD
•added 2020/05/07 5:15 p.m.•22 views

CVE-2020-5745

Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

7.4CVSS7.4AI score0.00827EPSS
SaveExploits1References1
OSV
OSV
•added 2020/05/07 5:15 p.m.•26 views

CVE-2020-5745

Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

7.4CVSS6.8AI score
SaveExploits0References1
Prion
Prion
•added 2020/05/07 5:15 p.m.•24 views

Cross site scripting

Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

4.3CVSS7.3AI score0.00827EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2020/05/07 4:10 p.m.•73 views

CVE-2020-5745

CVE-2020-5745 : TCExam 14.2.2 is affected by a Cross-Site Request Forgery (CSRF) vulnerability. A remote attacker can induce a user to perform sensitive actions by tricking them into clicking a crafted link. The NVD CVSS data shows a base score of 7.4 (AV:N/AC:L/PR:N/UI:R/S:C/I:H/A:N) and 4.3 (CV...

7.4CVSS7.3AI score0.00827EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/05/07 4:10 p.m.•29 views

CVE-2020-5745

Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

7.4AI score0.00827EPSS
SaveExploits1References1
Mend
Mend
•added 2020/05/07 4:10 p.m.•3 views

CVE-2020-5745

Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

8.3CVSS0.00827EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2020/05/07 12:00 a.m.•2 views

PT-2020-18666

Name of the Vulnerable Software and Affected Versions TCExam version 14.2.2 Description The issue allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link, due to cross-site request forgery. Recommendations For TCExam version...

7.4CVSS0.00827EPSS
SaveExploits1References3
OSV
OSV
•added 2019/07/31 6:15 p.m.•26 views

CVE-2019-3959

Cross-site request forgery in WallacePOS 1.4.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

8.8CVSS6.8AI score
SaveExploits0References1
NVD
NVD
•added 2019/07/31 6:15 p.m.•29 views

CVE-2019-3959

Cross-site request forgery in WallacePOS 1.4.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link...

8.8CVSS8.5AI score0.00832EPSS
SaveExploits1References1
Rows per page
Query Builder