Lucene search
+L

2216 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/10/24 12:00 a.m.•9 views

CVE-2013-1733: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in processbug.cgi in Bugzilla 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that modify bugs via vectors involving a midair-collision token...

6.8CVSS6AI score0.00579EPSS
SaveExploits1References2
Prion
Prion
•added 2013/10/13 10:20 a.m.•33 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users...

6.8CVSS7.5AI score0.0057EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/10/13 12:00 a.m.•9 views

CVE-2013-4056: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users...

6.8CVSS6AI score0.0057EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/10/13 12:00 a.m.•6 views

PT-2013-4822

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.7 through FP2 IBM InfoSphere Information Server versions 9.1 through 9.1.2.0 Description A cross-site request forgery CSRF issue affects the Data Quality Console and Information Analyzer components,...

6.8CVSS0.0057EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/10/10 12:00 a.m.•11 views

CVE-2013-0580: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to hijack the authentication of arbitrary users...

4.9CVSS6AI score0.00334EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/10/09 12:00 a.m.•4 views

PT-2013-2567

Name of the Vulnerable Software and Affected Versions Mingle Forum plugin versions 1.0.34 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests, enabling them to modify user privileges or conduct cross-site scripting XSS attacks...

6.8CVSS5.6AI score0.01058EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/10/05 12:00 a.m.•6 views

CVE-2012-4084: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web-management interface in the fabric interconnect FI component in Cisco Unified Computing System UCS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCtg20755...

6.8CVSS6AI score0.00817EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/10/04 12:00 a.m.•5 views

CVE-2013-3540: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models allows remote attackers to hijack the authentication of administrators for requests that add users...

6.8CVSS5.9AI score0.00972EPSS
SaveExploits5References2
Cvelist
Cvelist
•added 2013/10/01 7:00 p.m.•46 views

CVE-2013-3690

Cross-site request forgery CSRF vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.1.0.8 and earlier, allows remote attackers to hijack the authentication of administrators for requests that...

7.2AI score0.12381EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/10/01 12:00 a.m.•9 views

CVE-2013-3539: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and possibly other camera models allows remote attackers to hijack the authentication of administrators for...

6.8CVSS5.9AI score0.08756EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2013/09/28 12:00 a.m.•5 views

PT-2013-2452

Name of the Vulnerable Software and Affected Versions IBM Rational ClearQuest versions 7.1 through 7.1.2.12 IBM Rational ClearQuest versions 8.0 through 8.0.0.8 IBM Rational ClearQuest versions 8.0.1 through 8.0.1.1 Description A cross-site request forgery CSRF issue exists, allowing remote...

6.8CVSS0.00636EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/09/28 12:00 a.m.•7 views

CVE-2013-0598: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users...

6.8CVSS6AI score0.00636EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/09/25 12:00 a.m.•9 views

CVE-2013-5937: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete database information via vectors involving the Drupal Form API...

6.8CVSS5.9AI score0.00643EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/09/16 12:00 a.m.•7 views

CVE-2013-5494: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCui45209 and CSCui44674...

6.8CVSS6AI score0.00818EPSS
SaveExploits0References2
Prion
Prion
•added 2013/09/10 7:55 p.m.•24 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add a testimonial via an iNICtestimonialsave action; 2 add a listing template via an...

6.8CVSS6.9AI score0.03154EPSS
SaveExploits2References9Affected Software1
Positive Technologies
Positive Technologies
•added 2013/09/10 12:00 a.m.•10 views

PT-2013-5719

Name of the Vulnerable Software and Affected Versions IndiaNIC Testimonial plugin version 2.2 for WordPress Description The issue allows remote attackers to hijack the authentication of administrators for various requests, including adding testimonials, listing templates, and widget templates. It...

6.8CVSS0.03154EPSS
SaveExploits2References12
NVD
NVD
•added 2013/09/06 11:15 a.m.•37 views

CVE-2013-3605

Cross-site request forgery CSRF vulnerability in Coursemill Learning Management System LMS 6.6 allows remote attackers to hijack the authentication of arbitrary users via vectors related to cookies...

6.8CVSS6.9AI score0.00619EPSS
SaveExploits0References1
Prion
Prion
•added 2013/09/06 11:15 a.m.•32 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Coursemill Learning Management System LMS 6.6 allows remote attackers to hijack the authentication of arbitrary users via vectors related to cookies...

6.8CVSS7.3AI score0.00619EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2013/09/06 10:00 a.m.•42 views

CVE-2013-3605

Cross-site request forgery CSRF vulnerability in Coursemill Learning Management System LMS 6.6 allows remote attackers to hijack the authentication of arbitrary users via vectors related to cookies...

6.9AI score0.00619EPSS
SaveExploits0References1
NVD
NVD
•added 2013/09/05 3:27 a.m.•20 views

CVE-2013-5471

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Global Site Selector GSS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh42164...

6.8CVSS7.2AI score0.00984EPSS
SaveExploits0References4
Rows per page
Query Builder