1018 matches found
Jenkins 1.626 - Cross Site Request Forgery / Code Execution Vulnerabilities
Cross site request forgery vulnerability in Jenkins 1.626 allows remote attackers to hjiack the authentication of users for most request. Using CSRF it is able to change specific settings or even execute code on os. Title: Jenkins 1.626 - Cross Site Request Forgery / Code Execution Date: 27.08.15...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authentication or intranet connectivity of arbitrary users...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in admin.php in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote attackers to hijack the authentication of arbitrary users...
CVE-2015-2983
Cross-site request forgery CSRF vulnerability in admin.php in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote attackers to hijack the authentication of arbitrary users...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in EMC RSA Archer GRC 5.5 SP1 before P3 allow remote attackers to hijack the authentication of arbitrary users...
CVE-2015-4530
Cross-site request forgery CSRF vulnerability in EMC Documentum WebTop before 6.8P01, Documentum Administrator through 7.2, Documentum Digital Assets Manager through 6.5SP6, Documentum Web Publishers through 6.5SP7, and Documentum Task Space through 6.7SP2 allows remote attackers to hijack the...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Honeywell Tuxedo Touch before 5.2.19.0VA allows remote attackers to hijack the authentication of arbitrary users for requests associated with home-automation commands, as demonstrated by a door-unlock command...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the web framework in Cisco Unified Intelligence Center 10.01 and 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuu94862 and CSCuu97936...
CVE-2015-4274
Cross-site request forgery CSRF vulnerability in the web framework in Cisco Unified Intelligence Center 10.01 and 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuu94862 and CSCuu97936...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability on Cisco TelePresence Advanced Media Gateway devices with software 1.11.40 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90732...
CVE-2015-4258
The CVE-2015-4258 CSRF vulnerability affects Cisco TelePresence MSE 8000 Series. The issue arises from insufficient CSRF protection, enabling unauthenticated remote attackers to trick users into performing actions within the web interface, effectively hijacking user sessions. Affected component i...
CVE-2015-4252
Cross-site request forgery CSRF vulnerability on Cisco TelePresence ISDN Gateway devices with software 2.21.106 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90724...
CVE-2015-1485
Cross-site request forgery CSRF vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention DLP before 12.5.2 allows remote attackers to hijack the authentication of administrators...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in IBM Security Network Protection 5.3 before 5.3.1 allows remote attackers to hijack the authentication of arbitrary users...
Vesta Control Panel Cross-Site Request Forgery Vulnerability (CNVD-2015-04122)
Vesta Control Panel is an open source web hosting control panel. Vesta Control Panel versions prior to 0.9.8-14 suffer from a cross-site request forgery vulnerability that allows remote attackers to hijack the authentication of arbitrary user identities...
CVE-2015-4189
Cross-site request forgery CSRF vulnerability in Cisco Data Center Analytics Framework DCAF 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807...
CVE-2015-4586
Cross-site request forgery CSRF vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote attackers to hijack the authentication of administrators for requests that create a user account via an adduser action in a request to password.cmd...
CVE-2015-4140
Cross-site request forgery CSRF vulnerability in the WP Smiley plugin 1.4.1 for WordPress allows remote attackers to hijack the authentication of editors for requests that conduct cross-site scripting XSS attacks via the s4w-more parameter to the smilies4wp.php page to wp-admin/options-general.ph...
CVE-2015-4659
Cross-site request forgery CSRF vulnerability in ClickHeat 1.14 and earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a config action to index.php...