camel-neo4j deleteNode retrieveNodes Node Modification

The vulnerability of the deleteNode and retrieveNodes functions in the Neo4jProducer class of the camel-neo4j framework from Apache Camel is related to improper elimination of special elements in data queries. Exploiting this vulnerability could allow an attacker to gain access to read, modify, o...

CVE-2021-28674

The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node outside of the attacker's perimeter via an account with write permissions. This occurs because node IDs are predictable with incrementing numbers and the access control on...

CVE-2022-26346

A denial of service vulnerability exists in the uclouddelnode functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability...

CVE-2021-28674

The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node outside of the attacker's perimeter via an account with write permissions. This occurs because node IDs are predictable with incrementing numbers and the access control on...

PT-2021-17897

Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform versions prior to 2020.2.5 HF1 Description: The node management page in SolarWinds Orion Platform allows an attacker to create or delete a node outside of the attacker's perimeter via an account with write permission...

Drupal Node Template Module Cross-Site Request Forgery Vulnerability

Drupal is a free and open source content management system developed in PHP.Node Template is a module that uses the structure and data of nodes as a template. A cross-site request forgery vulnerability exists in the Drupal Node Template module that allows a remote attacker to construct a maliciou...

CVE-2015-4397

Cross-site request forgery CSRF vulnerability in the Node Template module for Drupal allows remote attackers to hijack the authentication of users with the "access node template" permission for requests that delete node templates via unspecified vectors...

PT-2015-6579

Name of the Vulnerable Software and Affected Versions Drupal Node Template module affected versions not specified Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack user authentication for requests that delete node templates. This affects users with th...

Drupal Alfresco Module Cross-Site Request Forgery Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Alfresco is one of the enterprise content management system modules that integrates Drupal and Alfresco. A cross-site request forgery vulnerability exists in Drupal Alfresco module...

CVE-2015-3366: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Alfresco module before 6.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that delete an alfresco node via unspecified vectors...

PT-2015-6187

Name of the Vulnerable Software and Affected Versions Alfresco module versions prior to 6.x-1.3 for Drupal Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that delete an alfresco node. Recommendations For...