942 matches found
CVE-2016-5420
curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate...
CVE-2016-5420
curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate...
PT-2016-6628
Name of the Vulnerable Software and Affected Versions Crestron Electronics DM-TXRX-100-STR devices with firmware through 1.3039.00040 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication ...
PT-2016-5835
Name of the Vulnerable Software and Affected Versions FortiWeb versions prior to 5.5.3 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that change the password. Recommendations For versions prior to 5.5.3,...
IBM Jazz Reporting Service (JRS) Cross-Site Request Forgery Vulnerability
IBM Jazz Reporting Service is an optional component of IBM Rational Reporting for Development Intelligence. IBM Jazz Reporting Service JRS has a cross-site request forgery vulnerability in the Report Builder and Data Collection Component DCC implementations. A remote attacker could exploit this...
CVE-2016-2863: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in IBM WebSphere Commerce 7.0 Feature Pack 8, 8.0.0.x before 8.0.0.10, and 8.0.1.x before 8.0.1.2 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...
PT-2016-4653
Name of the Vulnerable Software and Affected Versions NTT EAST Hikari Denwa routers versions PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier NTT WEST Hikari Denwa routers versions PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier Description A cross-site request forgery CSRF issue...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees...
PT-2016-4177
Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 before 3.3.2.6 IBM TRIRIGA Application Platform versions 3.4 before 3.4.2.4 IBM TRIRIGA Application Platform versions 3.5 before 3.5.0.2 Description A cross-site request forgery CSRF issue allows...
CVE-2016-4820
CVE-2016-4820 is a cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE ETX-R routers (CWE-352). The ETX-R web management interface can be abused by a logged-in user viewing a malicious page, allowing an attacker to perform unintended actions in the user’s authenticated session. Roo...
CVE-2016-4494
Cross-site request forgery CSRF vulnerability on KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allows remote attackers to hijack the authentication of unspecified victims for requests that disclose the contents of a configuration file...
CVE-2016-4506
Cross-site request forgery CSRF vulnerability on Resource Data Management RDM Intuitive 650 TDB Controller devices before 2.1.24 allows remote authenticated users to hijack the authentication of arbitrary users...
CVE-2016-4506: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability on Resource Data Management RDM Intuitive 650 TDB Controller devices before 2.1.24 allows remote authenticated users to hijack the authentication of arbitrary users...
PT-2016-5088
Name of the Vulnerable Software and Affected Versions Moxa MiiNePort E1 4641 version 1.1.10 Build 09120714 Moxa MiiNePort E1 7080 version 1.1.10 Build 09120714 Moxa MiiNePort E2 1242 version 1.1 Build 10080614 Moxa MiiNePort E2 4561 version 1.1 Build 10080614 Moxa MiiNePort E3 version 1.0 Build...
CVE-2016-2157
Cross-site request forgery CSRF vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to hijack the authentication of administrators for requests that manage...
CVE-2016-3168
The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability."...
CVE-2016-3168
The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability."...
PT-2016-3717
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Server versions prior to 8.5 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the Mail interface. These vulnerabilities allow remote attackers to hijack the authentication of...
