CVE-2015-3375: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Shibboleth Authentication module before 6.x-4.1 and 7.x-4.x before 7.x-4.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete user role matching rules via unspecified vectors...

PT-2015-6191

Name of the Vulnerable Software and Affected Versions Drupal Node Invite module versions prior to 6.x-2.5 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of users with the node invite can manage invite permission for requests that re-enable...

CVE-2015-3355: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Batch Jobs module before 7.x-1.2 for Drupal allow remote attackers to hijack the authentication of certain users for requests that 1 delete a batch job record or 2 execute a task via unspecified vectors...

CVE-2015-3350: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Todo Filter module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that toggle a task via unspecified vectors...

CVE-2015-3367: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Patterns module before 7.x-2.2 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 restore, 2 publish, or 3 unpublish a pattern via unspecified vectors...

DEBIAN-CVE-2015-2940

Cross-site request forgery CSRF vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users for requests that retrieve sensitive user information via unspecified vectors...

CVE-2015-2940: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users for requests that retrieve sensitive user information via unspecified vectors...

CVE-2015-2295

PfSense WebGUI (pfSense before 2.2.1) is affected by CVE-2015-2295 due to CSRF in system_firmware_restorefullbackup.php, enabling an attacker to hijack admin authentication and issue deletefile requests that can remove arbitrary files with root privileges. Several connected advisories corroborate...

CVE-2015-0259

OpenStack Compute Nova before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage...

PT-2015-5005

Name of the Vulnerable Software and Affected Versions XZERES 442SR OS version on 442SR wind turbines affected versions not specified Description A cross-site request forgery issue allows remote attackers to hijack the authentication of admins for requests that modify the default user's password v...

PT-2015-5875

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention Endpoint DLPe versions prior to 9.3 Patch 4 Hotfix 16 9.3.416.4 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the ePO extension. These vulnerabilities allow remote...

CVE-2015-2759: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allow remote attackers to hijack the authentication of users for requests that 1 obtain sensitive information or 2 modify the database...

PT-2015-4129

Name of the Vulnerable Software and Affected Versions IBM Rational ClearQuest versions 7.1.x through 7.1.2.17 IBM Rational ClearQuest versions 8.0.0.x through 8.0.0.14 IBM Rational ClearQuest versions 8.0.1.x through 8.0.1.7 Description A cross-site request forgery CSRF issue allows remote...

CVE-2015-2680

Cross-site request forgery CSRF vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request in the users page to gxadmin/index.php...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in MikroTik RouterOS 5.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request in the status page to /cfg...

CVE-2015-2334

Cross-site request forgery CSRF vulnerability in the Admin Control Panel ACP login in MyBB aka MyBulletinBoard before 1.8.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-2334

Cross-site request forgery CSRF vulnerability in the Admin Control Panel ACP login in MyBB aka MyBulletinBoard before 1.8.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2015-5721

Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.4 Description A cross-site request forgery CSRF issue exists in the Admin Control Panel ACP login, allowing remote attackers to hijack the authentication of victims. Recommendations For versions prior to 1.8.4, updat...

PT-2015-4951

Name of the Vulnerable Software and Affected Versions All In One WP Security & Firewall plugin versions prior to 3.9.0 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that delete logs of 404 HTTP status codes...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the CrossSlide jQuery crossslide-jquery-plugin-for-wordpress plugin 2.0.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings or conduct cross-site scripting XSS...