942 matches found
CVE-2016-1170
Cross-site request forgery CSRF vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators...
CVE-2016-1170: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators...
CVE-2016-1168
Cross-site request forgery CSRF vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier allows remote attackers to hijack the authentication of arbitrary users...
CVE-2016-1167
Cross-site request forgery CSRF vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users...
CVE-2016-1167
The CVE-2016-1167 issue affects the NEC Aterm WG300HP wireless router. A cross-site request forgery (CSRF) vulnerability could allow an attacker to hijack the authentication of an authenticated user. Affected component: the device’s management interface (web UI); root cause is CSRF (CWE-352) enab...
CVE-2016-1167: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users...
PT-2016-4615
Name of the Vulnerable Software and Affected Versions NEC Aterm WF800HP versions 1.0.17 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For versions 1.0.17 and earlier, update to a version lat...
CVE-2015-8152
Cross-site request forgery CSRF vulnerability in Symantec Endpoint Protection Manager SEPM 12.1 before RU6-MP4 allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by adding lines to a logging script...
PT-2016-3862
Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager version 12.1 before RU6-MP4 Description A cross-site request forgery issue allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by...
PT-2016-4612
Name of the Vulnerable Software and Affected Versions Corega CG-WLBARGMH and CG-WLBARGNL devices affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that perform administrative...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in admin/registration/register.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote attackers to hijack the authentication of administrators for requests that send statistics to an arbitrary hub U...
CVE-2015-5338
Multiple cross-site request forgery CSRF vulnerabilities in the lesson module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allow remote attackers to hijack the authentication of arbitrary users for requests to 1 mod/lesson/mediafile.php or 2...
CVE-2015-5335
Cross-site request forgery CSRF vulnerability in admin/registration/register.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote attackers to hijack the authentication of administrators for requests that send statistics to an arbitrary hub U...
CVE-2015-5338
CVE-2015-5338 affects Moodle’s lesson module, enabling CSRF that can hijack user authentication for requests to mod/lesson/mediafile.php or mod/lesson/view.php. Impacted versions are Moodle up to 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3. The connected sources confir...
CVE-2015-5335
CVE-2015-5335 affects Moodle versions 2.6.11 and earlier, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3. It is a Cross-site request forgery (CSRF) vulnerability in admin/registration/register.php that can allow remote attackers to hijack the authentication of administrators for ...
CVE-2016-1151
Multiple cross-site request forgery CSRF vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication of arbitrary users...
PT-2016-4426
Name of the Vulnerable Software and Affected Versions Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS versions prior to 5.1 Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS version 4.1.0 Build 16 Description A cross-site request forgery CSRF issue...
CVE-2016-0863: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitrary users...