CVE-2014-3305

Cross-site request forgery CSRF vulnerability in the web framework in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuj81735...

CVE-2014-2369

Cross-site request forgery CSRF vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-2369 Omron NS Series HMI Cross-Site Request Forgery

Cross-site request forgery CSRF vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Executer in RICOS in IBM Algo Credit Limits aka ACLM 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allow remote attackers to hijack the authentication of arbitrary users for requests that change 1 a deal's currency or 2 a...

CVE-2014-0864

Multiple cross-site request forgery CSRF vulnerabilities in Executer in RICOS in IBM Algo Credit Limits aka ACLM 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allow remote attackers to hijack the authentication of arbitrary users for requests that change 1 a deal's currency or 2 a...

CVE-2014-4718

Multiple cross-site request forgery CSRF vulnerabilities in Lunar CMS before 3.3-3 allow remote attackers to hijack the authentication of administrators for requests that 1 add Super users via a request to admin/usercreate.php or conduct cross-site scripting XSS attacks via the 2 email or 3 subje...

CVE-2014-4716

Cross-site request forgery CSRF vulnerability in Thomson TWG87OUIR allows remote attackers to hijack the authentication of unspecified victims for requests that change passwords via the Password and PasswordReEnter parameters to goform/RgSecurity...

CVE-2014-3920

Cross-site request forgery CSRF vulnerability in Kanboard before 1.0.6 allows remote attackers to hijack the authentication of administrators for requests that add an administrative user via a save action to the default URI...

CVE-2014-3920

Cross-site request forgery CSRF vulnerability in Kanboard before 1.0.6 allows remote attackers to hijack the authentication of administrators for requests that add an administrative user via a save action to the default URI...

CVE-2014-3920

CVE-2014-3920 refers to a CSRF vulnerability in Kanboard up to version 1.0.5 (fixed by vendor in 1.0.6). The issue arises from insufficient validation of the HTTP request origin, allowing a remote attacker to coerce an authenticated administrator into adding another administrative user via a save...

CVE-2014-3881

Cross-site request forgery CSRF vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2014-4030

CVE-2014-4030 affects the JW Player plugin for WordPress (pre-2.1.4). The flaw is a CSRF that enables remote attackers to hijack an administrator’s session to remove players via a delete action to wp-admin/admin.php. Impact is partial confidentiality/integrity/availability via admin actions; expl...

CVE-2014-3778

Multiple cross-site request forgery CSRF vulnerabilities in goform/RgDdns in ARRIS formerly Motorola SBG901 SURFboard Wireless Cable Modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the dns service via the DdnsService parameter, 2 change the...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in goform/RgDdns in ARRIS formerly Motorola SBG901 SURFboard Wireless Cable Modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the dns service via the DdnsService parameter, 2 change the...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to Forms/toolsadmin1...

CVE-2014-3778

Multiple cross-site request forgery CSRF vulnerabilities in goform/RgDdns in ARRIS formerly Motorola SBG901 SURFboard Wireless Cable Modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the dns service via the DdnsService parameter, 2 change the...

CVE-2014-4188

Cross-site request forgery CSRF vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-4188

Hitachi Tuning Manager (and JP1/Performance Management - Manager Web Option 07-00 to 07-54) is affected by a CSRF vulnerability that can allow remote attackers to hijack the authentication of unspecified victims. Vectors are not detailed in the provided documents. Affected versions are Hitachi Tu...

CVE-2014-4163

Multiple cross-site request forgery CSRF vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the 1 buried or 2 featured status of a comment via a request to wp-admin/admin-ajax.php...