351 matches found
CVE-2019-11587
CVE-2019-11587 affects Atlassian Jira: exposed resources of the ViewLogging class allow CSRF, enabling remote modification of various settings. Impacted versions include Jira before 7.13.6, and 8.x before 8.2.3; specifically 8.3.0 before 8.3.2. The issue is triggered via CSRF without requiring au...
CVE-2019-11587: Cross-Site Request Forgery (CSRF)
Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allow remote attackers to modify various settings via Cross-site request forgery CSRF...
PT-2019-12397
Name of the Vulnerable Software and Affected Versions Jira versions prior to 7.13.6 Jira versions 8.0.0 through 8.2.3 Jira versions 8.3.0 through 8.3.2 Description The issue allows remote attackers to modify various settings via Cross-site request forgery CSRF due to exposed resources of the...
The ViewLogging class exposed various resources that were vulnerable to CSRF - CVE-2019-11587
Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allow remote attackers to modify various settings via Cross-site request forgery CSRF...
PT-2019-3767
Name of the Vulnerable Software and Affected Versions WAGO Series 750-88x versions 750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881, 750-882, 750-884, 750-885, 750-889 WAGO Series 750-87x versions 750-830, 750-849, 750-871, 750-872, 750-873 Description The issue exists due to hardcod...
WordPress WP Maintenance Mode Plugin Access Restriction Bypass Vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WP Maintenance Mode Plugin is used in one of the site maintenance page settings plugin. WordPress WP Maintenanc...
CVE-2018-0682
Denbun by NEOJAPAN Inc. Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier does not properly manage sessions, which allows remote attackers to read/send mail or change the configuration via unspecified vectors...
The administrative smart-commits resource was vulnerable to Cross-site request forgery (CSRF) - CVE-2018-13398
The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...
Hard-coded credential vulnerability in multiple Philips products
Philips PageWriter TC10 Cardiograph and others are different models of electrocardiograph equipment from Philips Netherlands. A security vulnerability exists in a number of Philips products that stems from the program's use of hard-coded credentials. An attacker in close physical proximity could...
Tenda Wireless N150 Router 5.07.50 Cross Site Request Forgery
Exploit Title: Tenda Wireless N150 Router 5.07.50 - Cross-Site Request Forgery Reboot Router Date: 2018-07-21 Exploit Author: Nathu Nandwani Website: http://nandtech.co CVE: CVE-2015-5996 Description: The router is vulnerable to a cross-site request forgery attacker. If an administrator is...
SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite Security Vulnerability
SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite are Russian SAFE'N'SEC's proactive defense-capable malware applications. SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft...
PT-2018-11540
Name of the Vulnerable Software and Affected Versions SoftControl/SafenSoft SysWatch versions prior to 4.4.2 SoftControl/SafenSoft TPSecure versions prior to 4.4.2 SoftControl/SafenSoft Enterprise Suite versions prior to 4.4.2 Description The issue allows a local attacker to restore the SysWatch...
PT-2018-17110
Name of the Vulnerable Software and Affected Versions: DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465.1.20161103 Description: A Cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that modify settings, potentially leading...
PT-2017-15107
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue concerns a CSRF problem via the "admin/general settingupd.php" endpoint, which can be exploited to modify settings in the user panel...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in the Basic Settings screen on Vonage Grandstream HT802 devices allows attackers to modify settings, related to cgi-bin/update...
CVE-2017-16563: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in the Basic Settings screen on Vonage Grandstream HT802 devices allows attackers to modify settings, related to cgi-bin/update...
Dokodemo eye Smart HD SCR02HD Unauthorized Access Vulnerability
Dokodemo eye Smart HD SCR02HD is a wireless monitor from NIPPON ANTENNA. An unauthorized access vulnerability exists in the Dokodemo eye Smart HD SCR02HD, which can be exploited by a remote attacker to view sensitive information and modify configuration...
PT-2017-17156
Name of the Vulnerable Software and Affected Versions iball Baton 150M iB-WRA150N version 1.2.6 Description The issue allows remote attackers to bypass authentication and view or modify administrative router settings. This is achieved by reading the HTML source code of the password.cgi file...
Authentication flaw
Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vectors related to reading a cookie parameter containing a UserId value...
CVE-2016-4503
Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vectors related to reading a cookie parameter containing a UserId value...