Lucene search
+L

7 matches found

CNVD
CNVD
•added 2021/01/22 12:00 a.m.•18 views

Eclipse Vertx-web Cross-Site Request Forgery Vulnerability

Eclipse Vertx-web is an Eclipse Foundation framework for building Web applications . A cross-site request forgery vulnerability exists in the Vert.x-Web framework v4.0 milestone 1-4, where the source program fails to perform proper CSRF validation. Instead of comparing the CSRF token in the reque...

8.8CVSS6.4AI score0.0058EPSS
SaveExploits0References1
Prion
Prion
•added 2018/05/31 10:29 p.m.•28 views

Cross site scripting

A cross-site scripting XSS vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header...

4.3CVSS6AI score0.00754EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2018/05/31 10:29 p.m.•42 views

CVE-2018-9186

A cross-site scripting XSS vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header...

6.1CVSS5.9AI score0.00754EPSS
SaveExploits0References2
CVE
CVE
•added 2018/05/31 10:00 p.m.•61 views

CVE-2018-9186

Fortinet FortiAuthenticator is affected in versions 4.0.0 through

6.1CVSS5.8AI score0.00754EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2018/05/31 10:00 p.m.•63 views

CVE-2018-9186

A cross-site scripting XSS vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header...

5.8AI score0.00754EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2018/05/31 10:00 p.m.•45 views

CVE-2018-9186

A cross-site scripting XSS vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header...

5.9AI score0.00754EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/31 12:00 a.m.•9 views

CVE-2018-9186: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header...

6.1CVSS6.3AI score0.00754EPSS
SaveExploits0References2
Rows per page
Query Builder