Lucene search
+L

2216 matches found

Positive Technologies
Positive Technologies
•added 2013/09/05 12:00 a.m.•4 views

PT-2013-4426

Name of the Vulnerable Software and Affected Versions ShareThis plugin versions prior to 7.0.6 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that modify the plugin's settings. Recommendations For versions prior t...

6.8CVSS0.01178EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/09/05 12:00 a.m.•5 views

CVE-2013-3479: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings...

6.8CVSS6AI score0.01178EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/09/05 12:00 a.m.•10 views

CVE-2013-5471: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Global Site Selector GSS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh42164...

6.8CVSS6AI score0.00984EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/29 12:00 a.m.•6 views

CVE-2013-3472: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...

6.8CVSS6AI score0.00708EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/08/29 12:00 a.m.•6 views

PT-2013-4422

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager CM affected versions not specified Description A cross-site request forgery CSRF issue in the Enterprise License Manager ELM of Cisco Unified Communications Manager CM allows remote attackers to hijack the...

6.8CVSS0.00708EPSS
SaveExploits0References3
Prion
Prion
•added 2013/08/28 1:09 p.m.•23 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in saveProperties.html in Corporater EPM Suite allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords...

6.8CVSS7.7AI score0.00619EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/21 12:00 a.m.•6 views

CVE-2013-3029: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert...

6.8CVSS5.9AI score0.00979EPSS
SaveExploits0References2
Prion
Prion
•added 2013/08/19 9:10 p.m.•29 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...

6.8CVSS7.7AI score0.00885EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2013/08/19 12:00 a.m.•4 views

PT-2013-5258

Name of the Vulnerable Software and Affected Versions BigTree CMS versions 4.0 RC2 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to "index.php...

6.8CVSS0.02199EPSS
SaveExploits5References8
Cvelist
Cvelist
•added 2013/08/19 12:00 a.m.•43 views

CVE-2013-4881

Cross-site request forgery CSRF vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php...

7AI score0.02199EPSS
SaveExploits5References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/19 12:00 a.m.•7 views

CVE-2013-4881: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php...

6.8CVSS5.9AI score0.02199EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2013/08/05 12:00 a.m.•8 views

PT-2013-4775

Name of the Vulnerable Software and Affected Versions IBM InfoSphere BigInsights versions 2.0 through 2.1 Description A cross-site request forgery CSRF issue allows remote authenticated users to hijack the authentication of unspecified victims. Recommendations For IBM InfoSphere BigInsights...

6CVSS0.00579EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/05 12:00 a.m.•8 views

CVE-2013-3992: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

6CVSS5.9AI score0.00579EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/03 12:00 a.m.•7 views

CVE-2013-3451: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Cisco Unified Communications Manager Unified CM allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033...

6.8CVSS6AI score0.00576EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/08/03 12:00 a.m.•4 views

PT-2013-4404

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager Unified CM affected versions not specified Description The issue allows remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations...

6.8CVSS0.00576EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/03 12:00 a.m.•5 views

CVE-2013-3450: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the User WebDialer page in Cisco Unified Communications Manager Unified CM allows remote attackers to hijack the authentication of arbitrary users for requests that dial calls, aka Bug ID CSCui13028...

6.8CVSS6AI score0.00576EPSS
SaveExploits0References2
NVD
NVD
•added 2013/08/01 1:32 p.m.•34 views

CVE-2013-4671

Cross-site request forgery CSRF vulnerability in the management console on the Symantec Web Gateway SWG appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

6CVSS6.5AI score0.02652EPSS
SaveExploits4References5
Prion
Prion
•added 2013/08/01 1:32 p.m.•16 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the management console on the Symantec Web Gateway SWG appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

6CVSS7AI score0.02652EPSS
SaveExploits4References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/07/31 12:00 a.m.•12 views

CVE-2013-4911: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Siemens WinCC TIA Portal 11 and 12 before 12 SP1 allows remote attackers to hijack the authentication of unspecified victims by leveraging improper configuration of SIMATIC HMI panels by the WinCC product...

6.8CVSS6AI score0.0108EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/07/31 12:00 a.m.•11 views

PT-2013-5266

Name of the Vulnerable Software and Affected Versions Siemens WinCC TIA Portal versions 11 through 12 before 12 SP1 Description A cross-site request forgery CSRF issue exists due to improper configuration of SIMATIC HMI panels by the WinCC product, allowing remote attackers to hijack the...

6.8CVSS0.0108EPSS
SaveExploits0References8
Rows per page
Query Builder