Lucene search
+L

1019 matches found

NVD
NVD
added 2013/09/05 3:27 a.m.12 views

CVE-2013-5471

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Global Site Selector GSS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh42164...

6.8CVSS7.2AI score0.00984EPSS
SaveExploits0References4
Prion
Prion
added 2013/08/28 1:9 p.m.13 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in saveProperties.html in Corporater EPM Suite allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords...

6.8CVSS7.7AI score0.00619EPSS
SaveExploits0References1
Prion
Prion
added 2013/08/19 9:10 p.m.16 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...

6.8CVSS7.7AI score0.00885EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2013/08/19 12:0 a.m.30 views

CVE-2013-4881

Cross-site request forgery CSRF vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php...

7AI score0.02199EPSS
SaveExploits5References5
NVD
NVD
added 2013/08/01 1:32 p.m.24 views

CVE-2013-4671

Cross-site request forgery CSRF vulnerability in the management console on the Symantec Web Gateway SWG appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

6CVSS6.5AI score0.02055EPSS
SaveExploits4References5
Prion
Prion
added 2013/08/01 1:32 p.m.11 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the management console on the Symantec Web Gateway SWG appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

6CVSS7AI score0.02055EPSS
SaveExploits4References5Affected Software1
Prion
Prion
added 2013/07/18 12:51 p.m.24 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web framework on the Cisco Identity Services Engine ISE allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh25506...

6.8CVSS7.7AI score0.00576EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2013/07/18 1:0 a.m.17 views

CVE-2013-4871

Cross-site request forgery CSRF vulnerability in the TEQneers SEO Enhancements tqseo extension before 5.0.1 for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

7.1AI score0.00695EPSS
SaveExploits0References6
Prion
Prion
added 2013/07/12 9:55 p.m.17 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Administration and View pages in Cisco Secure Access Control System ACS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177...

6.8CVSS7.7AI score0.01189EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2013/07/08 5:0 p.m.35 views

CVE-2013-1414

Multiple cross-site request forgery CSRF vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify 1 settings or 2 policies, or 3 restart the device via a...

7.2AI score0.02286EPSS
SaveExploits6References1
NVD
NVD
added 2013/07/02 3:43 a.m.28 views

CVE-2013-3395

Cross-site request forgery CSRF vulnerability in the web framework on Cisco IronPort Web Security Appliance WSA devices, Email Security Appliance ESA devices, and Content Security Management Appliance SMA devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs...

6.8CVSS7.3AI score0.00576EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2013/06/24 4:13 p.m.20 views

CVE-2013-1972

Cross-site request forgery CSRF vulnerability in the elFinder file manager module 6.x-0.x before 6.x-0.8 and 7.x-0.x before 7.x-0.8 for Drupal allows remote attackers to hijack the authentication of unspecified victims to create, modify, or delete files via unknown vectors...

7.2AI score0.01354EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2013/06/21 8:0 p.m.24 views

CVE-2013-3250

Cross-site request forgery CSRF vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...

7.3AI score0.00952EPSS
SaveExploits0References2
Prion
Prion
added 2013/04/25 8:55 p.m.14 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

6.8CVSS7AI score0.00954EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2013/04/19 11:44 a.m.4 views

CVE-2013-2697

Cross-site request forgery CSRF vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

6.8CVSS5.5AI score0.00954EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2013/04/10 5:14 p.m.6 views

Portal: Cross Site Request Forgery

Cross-site request forgery CSRF vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS5.8AI score0.00657EPSS
SaveExploits0References4
Prion
Prion
added 2013/03/29 4:8 p.m.16 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Software Use Analysis SUA application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format AMF messages...

6.8CVSS7.4AI score0.00636EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2013/03/29 10:0 a.m.22 views

CVE-2013-0452

Cross-site request forgery CSRF vulnerability in the Software Use Analysis SUA application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format AMF messages...

7.1AI score0.00636EPSS
SaveExploits0References3
NVD
NVD
added 2013/03/28 11:55 p.m.15 views

CVE-2012-5216

Cross-site request forgery CSRF vulnerability on HP ProCurve 1700-8 aka J9079A switches with software before VA.02.09 and 1700-24 aka J9080A switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS7.1AI score0.00968EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2013/03/28 11:55 p.m.2 views

CVE-2012-5216

Cross-site request forgery CSRF vulnerability on HP ProCurve 1700-8 aka J9079A switches with software before VA.02.09 and 1700-24 aka J9080A switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS5.7AI score0.00968EPSS
SaveExploits0References3
Rows per page
Query Builder