CVE-2015-7537

Cross-site request forgery CSRF vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method...

Design/Logic Flaw

examples/consumer/common.php in JanRain PHP OpenID library aka php-openid improperly checks the openid.realm parameter against the SERVERNAME element in the SERVER superglobal array, which might allow remote attackers to hijack the authentication of arbitrary users via vectors involving a crafted...

UBUNTU-CVE-2016-2049

examples/consumer/common.php in JanRain PHP OpenID library aka php-openid improperly checks the openid.realm parameter against the SERVERNAME element in the SERVER superglobal array, which might allow remote attackers to hijack the authentication of arbitrary users via vectors involving a crafted...

CVE-2016-2049

examples/consumer/common.php in JanRain PHP OpenID library aka php-openid improperly checks the openid.realm parameter against the SERVERNAME element in the SERVER superglobal array, which might allow remote attackers to hijack the authentication of arbitrary users via vectors involving a crafted...

CVE-2016-1139

Cross-site request forgery CSRF vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

IBM WebSphere Application Server Multiple Vulnerabilities (swg21644047)

IBM WebSphere Application Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Advantech WebAccess before 8.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Amped Wireless R10000 devices with firmware cross-site request forgery vulnerability

Amped Wireless R10000 devices with firmware are the R10000 series routers from Amped Wireless. A cross-site request forgery vulnerability exists in Amped Wireless R10000 devices with firmware version 2.5.2.11. This allows remote attackers to hijack the authentication of arbitrary user identities...

ZyXEL NBG-418N devices with firmware (AADZ.3) C0 cross-site request forgery vulnerability

ZyXEL NBG-418N is a wireless broadband router from ZyXEL Technology. A cross-site request forgery vulnerability exists in ZyXEL NBG-418N devices with firmware 1.00AADZ.3C0. This allows remote attackers to hijack the authentication of arbitrary user identities...

ReadyNet WRT300N-DD devices with firmware cross-site request forgery vulnerability

ReadyNet WRT300N-DD devices with firmware is a wireless router product from ReadyNet New Zealand. The ReadyNet WRT300N-DD devices with firmware 1.0.26 suffers from a cross-site request forgery vulnerability. This allows remote attackers to hijack the authentication of arbitrary user identities...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Lotus Mashups in IBM Mashup Center 3.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2015-5990

Cross-site request forgery CSRF vulnerability on Belkin F9K1102 2 devices with firmware 2.10.17 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Belkin F9K1102 2 devices with firmware 2.10.17 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7281

Cross-site request forgery CSRF vulnerability on ReadyNet WRT300N-DD devices with firmware 1.0.26 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-5996

Cross-site request forgery CSRF vulnerability on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7278

Cross-site request forgery CSRF vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the authentication of administrators for requests that modify a password...

Cisco DPQ3925 devices with EDVA cross-site request forgery vulnerability

The Cisco DPQ3925 devices is a wireless router device from Cisco USA. A cross-site request forgery vulnerability exists in Cisco DPQ3925 devices with EDVA 5.5.2. It allows remote attackers to hijack the authentication of arbitrary user identities...