PT-2014-4674

Name of the Vulnerable Software and Affected Versions McAfee Network Security Manager NSM versions prior to 6.1.15.39 McAfee Network Security Manager NSM versions 7.1.5.x prior to 7.1.5.15 McAfee Network Security Manager NSM versions 7.1.15.x prior to 7.1.15.7 McAfee Network Security Manager NSM...

PT-2014-5028

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.1 through 7.1.1.12 IBM Maximo Asset Management versions 7.5 through 7.5.0.6 IBM Maximo Asset Management versions 7.5.0 through 7.5.0.3 IBM Maximo Asset Management versions 7.5.1 through 7.5.1.2 Descriptio...

PT-2014-5596

Name of the Vulnerable Software and Affected Versions MailPoet Newsletters wysija-newsletters plugin versions prior to 2.6.11 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For versions prior to 2.6.11,...

PT-2014-5055

Name of the Vulnerable Software and Affected Versions IBM Emptoris Spend Analysis versions 9.5.x through 9.5.0.3 IBM Emptoris Spend Analysis versions 10.0.1.x through 10.0.1.2 IBM Emptoris Spend Analysis versions 10.0.2.x through 10.0.2.3 Description A cross-site request forgery CSRF issue allows...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in innovaphone PBX 10.00 sr11 and earlier allow remote attackers to hijack the authentication of administrators for requests that modify configurations or user accounts, as demonstrated by 1 changing the administrator password via a crafted...

CVE-2014-0641

Cross-site request forgery CSRF vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2014-2518

Multiple cross-site request forgery CSRF vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users...

PT-2014-3736

Name of the Vulnerable Software and Affected Versions EMC RSA Archer GRC Platform versions prior to 5.5 SP1 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For versions prior to 5.5 SP1, update to version 5.5...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 disqusreplace, 2 disquspublickey, or 3...

CVE-2014-5346

The CVE-2014-5346 entry affects the WordPress Disqus Comment System plugin version 2.77. The vulnerability is Cross-Site Request Forgery (CSRF) that allows remote attackers to hijack the authentication of administrators for requests that (1) activate or (2) deactivate the plugin via the active pa...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote...

PT-2014-3985

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 10.x through 11.x before 11.0-FP5 IBM InfoSphere Master Data Management Server for Product Information Management versions 9.x through 11.x before 11.3-IF2 Description A...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 create new FTP users via a CreateFTP action in the ftpmanagement module to the default URI, 2 conduct cross-site scriptin...

PT-2014-6338

Name of the Vulnerable Software and Affected Versions WordPress File Upload plugin wp-file-upload versions prior to 2.4.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that change plugin settings...

CVE-2014-3896

CVE-2014-3896 involves multiple CSRF vulnerabilities in Seeds acmailer CGI programs. Affected: acmailer < 3.8.17 and

CVE-2014-2974: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in php/useraccount.php in Silver Peak VX through 6.2.4 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2014-5100

Multiple cross-site request forgery CSRF vulnerabilities in Omeka before 2.2.1 allow remote attackers to hijack the authentication of administrators for requests that 1 add a new super user account via a request to admin/users/add, 2 insert cross-site scripting XSS sequences via the apikeylabel...

CVE-2014-0864

Multiple cross-site request forgery CSRF vulnerabilities in Executer in RICOS in IBM Algo Credit Limits aka ACLM 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allow remote attackers to hijack the authentication of arbitrary users for requests that change 1 a deal's currency or 2 a...

PT-2014-3902

Name of the Vulnerable Software and Affected Versions IBM Algo Credit Limits versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in Executer in RICOS. These vulnerabilities allow remote attackers to hijack the...