19025 matches found
IBM TXSeries for Multiplatforms: Cross-site Request Forgery Vulnerability
IBM TXSeries for Multiplatforms is a transaction monitoring and management software product from International Business Machines IBM designed to support distributed transaction processing on multiple platforms. A cross-site request forgery vulnerability exists in IBM TXSeries for Multiplatforms,...
CVE-2025-28131
A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enablin...
Cross-Site Request Forgery (CSRF)
mlflow is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to lack of proper protection mechanisms in the Signup feature, allowing an attacker to craft malicious requests to create an account and perform unauthorized actions...
Incorrect Authorization
Overview drupal/core is an an open source content management platform powering millions of websites and applications. Affected versions of this package are vulnerable to Incorrect Authorization due to a missing check in the access function in FieldUpdateActionBase.php. An attacker with limited...
PT-2025-14165
Name of the Vulnerable Software and Affected Versions Query Wrangler versions 1.5.53 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an attacker trick...
PT-2025-14218 · Unknown · Digireturn Dn Footer Contacts
Name of the Vulnerable Software and Affected Versions: digireturn DN Footer Contacts versions 1.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an...
PT-2025-14207 · Unknown · Easyappointments
Name of the Vulnerable Software and Affected Versions: Easy!Appointments versions 1.4.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 1.4.2 and...
PT-2025-14271 · Infoway Llc · Ebook Downloader
Name of the Vulnerable Software and Affected Versions: Infoway LLC Ebook Downloader versions 1.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Ebook Downloader, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendation...
PT-2025-14196 · Ownerrez · Ownerrez
Name of the Vulnerable Software and Affected Versions: OwnerRez versions n/a through 1.2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on the affected system. This is a type of attack where an attacker tricks ...
PT-2025-14183 · Maksym Marko · Mx Time Zone Clocks
Name of the Vulnerable Software and Affected Versions: Maksym Marko MX Time Zone Clocks versions n/a through 5.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...
PT-2025-14190
Name of the Vulnerable Software and Affected Versions SCSS WP Editor versions 1.1.8 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations For SCSS WP Editor versions 1.1.8...
CVE-2025-28131
A Broken Access Control vulnerability exists in Nagios Network Analyzer version 2024R1.0.3 . Due to improper authorization enforcement, low-privilege users with Read-Only access can perform unauthorized administrative actions, such as stopping system services and deleting critical resources . Thi...
CVE-2025-28131
A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enablin...
Nagios Network Analyzer Authorization Issue Vulnerability
Nagios Network Analyzer is an enterprise solution for monitoring and analyzing network traffic from Nagios, Inc. An authorization issue vulnerability exists in Nagios Network Analyzer version 2024R1.0.3, which stems from improper access control that allows a low-privileged user to perform...
PT-2025-14170 · Unknown · Embed Extended
Name of the Vulnerable Software and Affected Versions: Embed Extended – Embed Maps, Videos, Websites, Source Codes, and more versions 1.4.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's...
PT-2025-14256 · Unknown · Stylemix Pearl
Name of the Vulnerable Software and Affected Versions: Stylemix Pearl versions 1.3.9 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the user into...
PT-2025-14189
Name of the Vulnerable Software and Affected Versions CloudRedux Product Notices for WooCommerce versions 1.3.3 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved ...
Google Chrome Security Feature Vulnerability
Google Chrome is a WEB browser developed by Google Inc. Google Chrome suffers from an elevation of privilege vulnerability that originates from an improper implementation in Extensions, which can be exploited by an attacker to submit a special web request that induces the user to parse and elevat...
