CVE-2015-5397: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload code via unknown vectors...

CVE-2015-4253

Cross-site request forgery CSRF vulnerability on Cisco TelePresence Serial Gateway devices with software 1.01.42 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90728...

PT-2015-1634

Name of the Vulnerable Software and Affected Versions Cisco TelePresence MCU 4500 version 4.51.55 Description The issue is related to a cross-site request forgery CSRF vulnerability, which allows remote attackers to hijack the authentication of arbitrary users. This can enable unauthorized access...

PT-2015-1632

Name of the Vulnerable Software and Affected Versions Cisco TelePresence IP Gateway version 2.03.34 Description The issue is related to a cross-site request forgery CSRF vulnerability, which allows remote attackers to hijack the authentication of arbitrary users. This means an attacker could...

PT-2015-6629

Name of the Vulnerable Software and Affected Versions Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL version 1.0.0.20h.HOL Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that create a user account via an add...

CVE-2015-4586: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote attackers to hijack the authentication of administrators for requests that create a user account via an adduser action in a request to password.cmd...

PT-2015-6668

Name of the Vulnerable Software and Affected Versions FiverrScript version 7.2 Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that create a new admin via a request to "administrator/admins create.php". Recommendations For...

PT-2015-5944

Name of the Vulnerable Software and Affected Versions Vesta Control Panel versions prior to 0.9.8-14 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For versions prior to 0.9.8-14, update to version 0.9.8-14 o...

PT-2015-6659

Name of the Vulnerable Software and Affected Versions ClickHeat versions 1.14 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a config action to "index.php"...

PT-2015-5901

Name of the Vulnerable Software and Affected Versions Alcatel-Lucent OmniSwitch versions 6.4.5.R02 through 8.1.1.R01 Description A cross-site request forgery CSRF issue exists in the management web interface, specifically in the sec/content/sec asa users local db add.html file. This allows remote...

CVE-2015-4355

Cross-site request forgery CSRF vulnerability in the Watchdog Aggregator module for Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable monitoring sites via unspecified vectors...

CVE-2015-4349

Cross-site request forgery CSRF vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors...

CVE-2015-4353

Cross-site request forgery CSRF vulnerability in the Custom Sitemap module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete sitemaps via unspecified vectors...

CVE-2015-4362

The CVE-2015-4362 vulnerability affects the Drupal Tracking Code module (7.x-1.x) prior to 7.x-1.6. It is a CSRF flaw in tracking_code.admin.inc that could allow an attacker to hijack an administrator’s session to disable tracking codes. The fixed version is 7.x-1.6. If using this module on Drupa...

CVE-2015-4355

Cross-site request forgery CSRF vulnerability in the Watchdog Aggregator module for Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable monitoring sites via unspecified vectors...

PT-2015-6542

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 6.x-1.6 Drupal versions 6.x-2.x prior to 6.x-2.8 Drupal versions 7.x-1.x prior to 7.x-1.2 Description A cross-site request forgery CSRF issue exists in the Registration codes module, allowing remote attackers to hijack...

PT-2015-6531

Name of the Vulnerable Software and Affected Versions Drupal Spider Contacts module affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that delete contact categories. Recommendatio...

PT-2015-6535

Name of the Vulnerable Software and Affected Versions Drupal affected versions not specified Description A cross-site request forgery CSRF issue in the Custom Sitemap module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete sitemaps...

PT-2015-6565

Name of the Vulnerable Software and Affected Versions Drupal affected versions not specified Description A cross-site request forgery CSRF issue in the Decisions module allows remote attackers to hijack the authentication of arbitrary users for requests that remove individual voters. The attack...

CVE-2015-4391: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the CiviCRM private report module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of users for requests that delete reports via unspecified vectors...