Server side request forgery (ssrf)

IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 172815...

CVE-2019-4741

IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 172815...

Atlassian Jira Cross-Site Request Forgery Vulnerability (CNVD-2020-04570)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A cross-site request forgery vulnerability exists in Atlassian Jira. The vulnerability arises from a WEB application that does n...

Rumpus FTP Web File Manager Cross-Site Request Forgery Vulnerability (CNVD-2020-04663)

Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the FTP Settings feature of Web File Manager in Rumpus FTP version 8.2.9.1. The vulnerability stems from the WEB application not adequately verifying that a request is coming from a trusted...

Security Bulletin: IBM Content Navigator is vulnerable to Server Side Request Forgery (SSRF)

Summary IBM Content Navigator has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-4741 DESCRIPTION: IBM Content Navigator is vulnerable to Server Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system,...

CVE-2019-14843

A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks. Versions shipped with Red Hat Jboss E...

Atlassian Crowd Cross-Site Request Forgery Vulnerability

Atlassian Crowd is a Web-based single sign-on system from Atlassian Australia. The system provides authentication, authorization, and other functions for multiple users, web applications, and directory servers. A cross-site request forgery vulnerability exists in the Crowd Demo application in...

Landing-CMS Cross-Site Request Forgery Vulnerability

Landing-CMS is a content management system CMS for login page management. A cross-site request forgery vulnerability exists in Landing-CMS version 0.0.6. The vulnerability stems from the WEB application not adequately verifying that a request is coming from a trusted user. An attacker could use...

WordPress wp-social-bookmarking-light plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-social-bookmarking-light is a social sharing plugin that is used in it. A cross-site request forgery vulnerability exists in...

WordPress dynamic-widgets plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. dynamic-widgets is a dynamic widget management plugin used in it. A cross-site request forgery vulnerability exists in WordPress...

WordPress bookmarkify plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. bookmarkify is a bookmarking plugin used in it. A cross-site request forgery vulnerability exists in version 2.9.2 of the WordPress...

Server side request forgery (ssrf)

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the QRadar system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 160014...

CVE-2019-4262

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the QRadar system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 160014...

CVE-2019-4262

CVE-2019-4262 affects IBM QRadar SIEM versions 7.2 and 7.3. The issue is a Server-Side Request Forgery (SSRF) that could allow an unauthenticated attacker to cause the QRadar system to issue unauthorized requests, potentially enabling network enumeration or facilitating other attacks. The NVD met...

Atlassian Jira Cross-Site Request Forgery Vulnerability (CNVD-2019-29113)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A cross-site request forgery vulnerability exists in Atlassian Jira versions prior to 8.3.2. The vulnerability stems from a WEB...

WordPress popup-by-supsystic plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. popup-by-supsystic is a web window popup plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...

WordPress erident-custom-login-and-dashboard plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress erident-custom-login-and-dashboard plugin...

WordPress wp-ultimate-exporter plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-ultimate-exporter is a plugin that exports CSV files based on filtering criteria used in it. A cross-site request forgery...

WordPress simple-add-pages-or-posts plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. simple-add-pages-or-posts is used to add a plugin to one of the pages posts. A cross-site request forgery vulnerability...

D-Link DIR-655 C Cross-Site Request Forgery Vulnerability

The D-Link DIR-655 C is a wireless router from AUO D-Link of Taiwan, China. A cross-site request forgery vulnerability exists in the D-Link DIR-655 C prior to version 3.02B05 BETA03. The vulnerability stems from a WEB application not adequately verifying that a request is from a trusted user. An...