Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Adobe Connect before 9.5.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2016-2049

examples/consumer/common.php in JanRain PHP OpenID library aka php-openid improperly checks the openid.realm parameter against the SERVERNAME element in the SERVER superglobal array, which might allow remote attackers to hijack the authentication of arbitrary users via vectors involving a crafted...

CVE-2016-1139

Cross-site request forgery CSRF vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2016-1134

Cross-site request forgery CSRF vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and earlier, WHR-300HP2 devices with firmware 1.90 and earlier, WHR-600D devices with firmware 1.90 and...

PT-2016-4592

Name of the Vulnerable Software and Affected Versions BUFFALO BHR-4GRV2 versions 1.04 and earlier BUFFALO WEX-300 versions 1.90 and earlier BUFFALO WHR-1166DHP versions 1.90 and earlier BUFFALO WHR-300HP2 versions 1.90 and earlier BUFFALO WHR-600D versions 1.90 and earlier BUFFALO WMR-300 version...

Advantech WebAccess Cross-Site Request Forgery Vulnerability

WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation devices in facility management systems, power stations and building automation systems. A cross-site request forgery vulnerability exists in Advantech WebAccess versions pri...

PT-2016-3788

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS version 6.0 before 6.0.0-Rational-CLM-ifix005 Description A cross-site request forgery CSRF issue in the Lifecycle Query Engine LQE of IBM Jazz Reporting Service JRS allows remote authenticated users to hijack th...

PT-2016-3661

Name of the Vulnerable Software and Affected Versions IBM Connections versions 3.x through 3.0.1.1 CR2 IBM Connections versions 4.0 through 4.0 CR3 IBM Connections versions 4.5 through 4.5 CR4 IBM Connections versions 5.0 through 5.0 CR2 Description A cross-site request forgery CSRF issue allows...

CVE-2015-5996

Cross-site request forgery CSRF vulnerability on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 allows remote attackers to hijack the authentication of arbitrary users...

PT-2015-3211

Name of the Vulnerable Software and Affected Versions Belkin F9K1102 version 2.10.17 Description The issue is related to a cross-site request forgery CSRF vulnerability, which allows remote attackers to hijack the authentication of arbitrary users. This can enable unauthorized access to user...

PT-2015-3210

Name of the Vulnerable Software and Affected Versions Mediabridge Medialink MWN-WAPR300N version 5.07.50 Description The issue is related to a cross-site request forgery CSRF vulnerability, which allows remote attackers to hijack the authentication of arbitrary users. This can enable unauthorized...

PT-2015-7502

Name of the Vulnerable Software and Affected Versions ZyXEL NBG-418N version 1.00AADZ.3C0 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For version 1.00AADZ.3C0, update the firmware to a version that address...

PT-2015-7672

Name of the Vulnerable Software and Affected Versions eWON devices with firmware through 10.1s0 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that trigger firmware upload, removal of configuration data, or a...

PT-2015-7734

Name of the Vulnerable Software and Affected Versions Elasticsearch Kibana versions prior to 4.1.3 Elasticsearch Kibana versions 4.2.x prior to 4.2.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims via unknown vectors...

PT-2016-1301

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.6.11 Moodle versions 2.7.x before 2.7.11 Moodle versions 2.8.x before 2.8.9 Moodle versions 2.9.x before 2.9.3 Description A cross-site request forgery CSRF issue affects the admin/registration/register.php file,...

PT-2015-6918

Name of the Vulnerable Software and Affected Versions HP Operations Orchestration Central versions prior to 10.22.001 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. Recommendations For versions prior to 10.22.001, update to version...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in advpwdcgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128100611 through TS0705125D031115 allows remote attackers to hijack the authentication of arbitrary users...

PT-2015-7209

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS version X8.5.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For Cisco TelePresence Video...

CVE-2015-7984

Multiple cross-site request forgery CSRF vulnerabilities in Horde before 5.2.8, Horde Groupware before 5.2.11, and Horde Groupware Webmail Edition before 5.2.11 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary 1 commands via the cmd paramet...

PT-2015-7184

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions 10.51 through 10.6 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For Cisco Prime Collaboration Assurance...