Server side request forgery (ssrf)

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the QRadar system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 160014...

CVE-2019-4262

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the QRadar system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 160014...

CVE-2019-4262

CVE-2019-4262 affects IBM QRadar SIEM versions 7.2 and 7.3. The issue is a Server-Side Request Forgery (SSRF) that could allow an unauthenticated attacker to cause the QRadar system to issue unauthorized requests, potentially enabling network enumeration or facilitating other attacks. The NVD met...

PT-2019-17002

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.2 through 7.3 Description The issue allows an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. Recommendations For...

Atlassian Jira Cross-Site Request Forgery Vulnerability (CNVD-2019-29113)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A cross-site request forgery vulnerability exists in Atlassian Jira versions prior to 8.3.2. The vulnerability stems from a WEB...

WordPress popup-by-supsystic plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. popup-by-supsystic is a web window popup plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...

WordPress erident-custom-login-and-dashboard plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress erident-custom-login-and-dashboard plugin...

WordPress wp-ultimate-exporter plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-ultimate-exporter is a plugin that exports CSV files based on filtering criteria used in it. A cross-site request forgery...

WordPress simple-add-pages-or-posts plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. simple-add-pages-or-posts is used to add a plugin to one of the pages posts. A cross-site request forgery vulnerability...

D-Link DIR-655 C Cross-Site Request Forgery Vulnerability

The D-Link DIR-655 C is a wireless router from AUO D-Link of Taiwan, China. A cross-site request forgery vulnerability exists in the D-Link DIR-655 C prior to version 3.02B05 BETA03. The vulnerability stems from a WEB application not adequately verifying that a request is from a trusted user. An...

PT-2019-9835

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 11.3.x through 11.3.10 GitLab Community and Enterprise Edition versions 11.4.x through 11.4.7 GitLab Community and Enterprise Edition versions 11.5.x through 11.5.0 Description An issue was...

CloudBees Jenkins openid plugin cross-site request forgery vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . openid Plugin is used in one of the...

CloudBees Jenkins Chef Sinatra Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based development of continuous integration tools from the U.S. company CloudBees. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks.Chef Sinatra Plugin is used in one of the plugin in...

CloudBees Jenkins OpenShift Deployer Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based development of continuous integration tools from the U.S. company CloudBees. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks.OpenShift Deployer Plugin is used in one of the...

CVE-2018-17898

Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fails to prevent memory exhaustion by unauthorized requests. This could allow an attacker to cause the controller to become unstable...

CVE-2018-17898

Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fails to prevent memory exhaustion by unauthorized requests. This could allow an attacker to cause the controller to become unstable...

Code injection

Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fails to prevent memory exhaustion by unauthorized requests. This could allow an attacker to cause the controller to become unstable...

CVE-2018-17898

CVE-2018-17898 affects Yokogawa STARDOM Controllers (FCJ, FCN-100, FCN-RTU, FCN-500) on R4.10 and earlier. The issue is memory exhaustion caused by unauthorized requests, potentially making the controller unstable. Update/mitigation: Yokogawa states the memory exhaustion vulnerability is addresse...

CVE-2018-17898

Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fails to prevent memory exhaustion by unauthorized requests. This could allow an attacker to cause the controller to become unstable...

PT-2018-14252

Name of the Vulnerable Software and Affected Versions Yokogawa STARDOM Controllers versions R4.10 and prior Description The controller application fails to prevent memory exhaustion by unauthorized requests, which could allow an attacker to cause the controller to become unstable. Recommendations...