PT-2013-1300

Name of the Vulnerable Software and Affected Versions Schneider Electric Quantum versions 140NOE77111, 140NOE77101, and 140NWM10000 Schneider Electric M340 versions BMXNOC0401, BMXNOE0100x, and BMXNOE011xx Schneider Electric Premium versions TSXETY4103, TSXETY5103, and TSXWMY100 Description A...

CVE-2013-0663: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and Premium TSXETY4103, TSXETY5103, and TSXWMY100 PLC modules allows remote attackers to hijack the authentication of arbitrary...

PT-2013-2347

Name of the Vulnerable Software and Affected Versions IBM Tivoli Endpoint Manager 8.2 versions prior to 1.3.3 Description A cross-site request forgery CSRF issue exists in the Software Use Analysis SUA application, allowing remote attackers to hijack the authentication of arbitrary users via a we...

PT-2013-1783

Name of the Vulnerable Software and Affected Versions HP ProCurve 1700-8 aka J9079A versions before VA.02.09 HP ProCurve 1700-24 aka J9080A versions before VB.02.09 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims via unknown...

CVE-2013-0489

Cross-site request forgery CSRF vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators...

PT-2013-2381

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5.x Description A cross-site request forgery issue exists in the webadmin.nsf component, also known as the Web Administrator client. This allows remote authenticated users to hijack the authentication of administrators...

CVE-2013-0489: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators...

CVE-2013-0126: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via the username and userlevel...

CVE-2013-0717

Multiple cross-site request forgery CSRF vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that 1...

CVE-2013-0207

Cross-site request forgery CSRF vulnerability in the Mark Complete module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-0205

Cross-site request forgery CSRF vulnerability in the RESTful Web Services restws module 7.x-1.x before 7.x-1.2 and 7.x-2.x before 7.x-2.0-alpha4 for Drupal allows remote attackers to hijack the authentication of arbitrary users via unknown vectors...

CVE-2013-0205

Cross-site request forgery CSRF vulnerability in the RESTful Web Services restws module 7.x-1.x before 7.x-1.2 and 7.x-2.x before 7.x-2.0-alpha4 for Drupal allows remote attackers to hijack the authentication of arbitrary users via unknown vectors...

CVE-2013-0207

Cross-site request forgery CSRF vulnerability in the Mark Complete module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-0205

Cross-site request forgery CSRF vulnerability in the RESTful Web Services restws module 7.x-1.x before 7.x-1.2 and 7.x-2.x before 7.x-2.0-alpha4 for Drupal allows remote attackers to hijack the authentication of arbitrary users via unknown vectors...

PT-2013-2555

Name of the Vulnerable Software and Affected Versions NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers affected versions not specified Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the web-based...

CVE-2013-0327: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors...

PT-2013-2156

Name of the Vulnerable Software and Affected Versions Drupal restws module versions 7.x-1.x before 7.x-1.2 Drupal restws module versions 7.x-2.x before 7.x-2.0-alpha4 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users...

jenkins: cross-site request forgery (CSRF) on Jenkins master

Cross-site request forgery CSRF vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors...

CVE-2013-1153: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web interface in Cisco Prime Infrastructure allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCue84676...