CVE-2017-8328: Cross-Site Request Forgery (CSRF)

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of changing the administrative password for the web management interface. It seems that the device does not implement any cross site request forgery...

PT-2019-8619

Name of the Vulnerable Software and Affected Versions Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096 Description An issue was discovered where the device does not implement any cross-site scripting protection mechanism. This allows an attacker to trick a user who is logge...

PT-2019-8624

Name of the Vulnerable Software and Affected Versions Securifi Almond version AL-R096 Securifi Almond+ version AL-R096 Securifi Almond 2015 version AL-R096 Description The issue allows an attacker to exploit the lack of Origin header check on the web management interface. This enables the attacke...

PT-2019-8621

Name of the Vulnerable Software and Affected Versions Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096 Description An issue was discovered where the device does not implement any cross-site scripting forgery protection mechanism. This allows an attacker to trick a user who ...

CVE-2017-8334: Cross-Site Request Forgery (CSRF)

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection...

CVE-2017-9381

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a user with the capability of installing or deleting apps on the device using the web management interface. It seems that the device does not implement any cross-site request forgery protection...

Cross site request forgery (csrf)

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a user with the capability of installing or deleting apps on the device using the web management interface. It seems that the device does not implement any cross-site request forgery protection...

PT-2019-8650

Name of the Vulnerable Software and Affected Versions Vera VeraEdge version 1.7.19 Vera Veralite version 1.7.481 Description An issue was discovered where the device does not implement any cross-site request forgery protection mechanism. This allows an attacker to trick a user who navigates to an...

CVE-2017-9381: Cross-Site Request Forgery (CSRF)

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a user with the capability of installing or deleting apps on the device using the web management interface. It seems that the device does not implement any cross-site request forgery protection...

Microsoft Windows Audio Service Local Elevation of Privilege Vulnerability (CNVD-2019-24847)

The Microsoft Windows operating system is a set of operating systems developed by Microsoft Corporation in the United States. An elevation of privilege vulnerability exists locally in Microsoft Windows Audio Service, which can be exploited by an attacker to perform privileged operations in the we...

Microsoft Windows Audio Service Local Elevation of Privilege Vulnerability (CNVD-2019-24849)

The Microsoft Windows operating system is a set of operating systems developed by Microsoft Corporation in the United States. An elevation of privilege vulnerability exists locally in Microsoft Windows Audio Service, which can be exploited by an attacker to perform privileged operations in the we...

Microsoft Windows Audio Service Local Elevation of Privilege Vulnerability

The Microsoft Windows operating system is a set of operating systems developed by Microsoft Corporation in the United States. An elevation of privilege vulnerability exists locally in Microsoft Windows Audio Service, which can be exploited by an attacker to perform privileged operations in the we...

PT-2019-9962

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U FTP Server version 15.1.6.25 Description The local management interface in SolarWinds Serv-U FTP Server has incorrect access controls, allowing local users to bypass authentication and execute code in the context of the Windo...

CVE-2019-1881

CVE-2019-1881 affects Cisco Industrial Network Director (IND) web-based management interface. The issue is a CSRF vulnerability caused by insufficient CSRF protections, allowing an unauthenticated, remote attacker to induce a logged-in user to perform arbitrary actions on an affected device by co...

CVE-2019-1881 Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Industrial Network Director IND could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2019-1868 Cisco Webex Meetings Server Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to access sensitive system information. The vulnerability is due to improper access control to files within the web-based management interface. An attacker could...

Cisco Webex Meetings Server Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to access sensitive system information. The vulnerability is due to improper access control to files within the web-based management interface. An attacker could...

Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Enterprise Chat and Email ECE Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

PT-2019-2364

Name of the Vulnerable Software and Affected Versions Cisco Industrial Network Director IND affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and...

PT-2019-2356

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Server affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to access sensitive system information due to improper access control...