Lucene search
+L

1893 matches found

Debian CVE
Debian CVE
•added 2014/03/14 4:00 p.m.•31 views

CVE-2013-1399

Removed by vendor...

6.8CVSS5.7AI score0.00602EPSS
SaveExploits0
NVD
NVD
•added 2014/03/14 10:55 a.m.•30 views

CVE-2013-6188

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS7AI score0.00979EPSS
SaveExploits0References1
Prion
Prion
•added 2014/03/14 10:55 a.m.•27 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS7.5AI score0.00979EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2014/03/13 2:00 p.m.•53 views

CVE-2013-3729

Multiple cross-site request forgery CSRF vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the 1 groups parameter in a send action in the sendmail module or 2 query parameter in ...

7.9AI score0.01215EPSS
SaveExploits5References6
Cvelist
Cvelist
•added 2014/03/11 3:00 p.m.•64 views

CVE-2013-2754

Cross-site request forgery CSRF vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a request to admin/users/add/user/do/...

6.9AI score0.02278EPSS
SaveExploits5References5
Positive Technologies
Positive Technologies
•added 2014/03/10 12:00 a.m.•3 views

PT-2014-3227

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC versions 9.3.x through 9.3-64.4 Citrix NetScaler Application Delivery Controller ADC versions 10.0 through 10.0-77.5 Citrix NetScaler Application Delivery Controller ADC versions 10.1 throug...

6.8CVSS0.00873EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2014/03/06 11:00 a.m.•36 views

CVE-2014-0336

Cross-site request forgery CSRF vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that use the usernewmaster parameter to the adminconsole/ URI...

7.1AI score0.00698EPSS
SaveExploits1References1
NVD
NVD
•added 2014/02/24 4:48 a.m.•38 views

CVE-2013-6202

Multiple cross-site request forgery CSRF vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that 1 insert XSS sequences or 2 execute arbitrary code...

6.8CVSS7.2AI score0.02284EPSS
SaveExploits1References2
Prion
Prion
•added 2014/02/24 4:48 a.m.•30 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that 1 insert XSS sequences or 2 execute arbitrary code...

6.8CVSS7.6AI score0.02284EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2014/02/20 5:18 a.m.•34 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Call Detail Records Analysis and Reporting CAR page in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make CAR modifications, aka Bug I...

6.8CVSS7.7AI score0.00974EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2014/02/14 4:55 p.m.•29 views

CVE-2014-0813

Cross-site request forgery CSRF vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to hijack the authentication of arbitrary users for requests that modify settings...

6.8CVSS7.1AI score0.01071EPSS
SaveExploits0References7
NVD
NVD
•added 2014/02/07 3:48 p.m.•38 views

CVE-2014-1915

Multiple cross-site request forgery CSRF vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to hijack the authentication of 1 administrators for requests that change the administrator password via an update action to sw/adminchangepassword.php or 2...

6.8CVSS7.5AI score0.02468EPSS
SaveExploits3References4
Prion
Prion
•added 2014/02/07 3:48 p.m.•32 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to hijack the authentication of 1 administrators for requests that change the administrator password via an update action to sw/adminchangepassword.php or 2...

6.8CVSS7.8AI score0.02468EPSS
SaveExploits4References4Affected Software1
Cvelist
Cvelist
•added 2014/02/07 3:00 p.m.•42 views

CVE-2014-1915

Multiple cross-site request forgery CSRF vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to hijack the authentication of 1 administrators for requests that change the administrator password via an update action to sw/adminchangepassword.php or 2...

7.5AI score0.02468EPSS
SaveExploits3References4
CVE
CVE
•added 2014/02/07 3:00 p.m.•80 views

CVE-2014-1915

CVE-2014-1915 affects Command School Student Management System 1.06.01 and involves Multiple CSRF vulnerabilities. The described flaws allow remote attackers to hijack admin authentication for password changes via sw/admin_change_password.php and to perform add_topic.php actions (adding a topic o...

6.8CVSS7.7AI score0.02468EPSS
SaveExploits3References4Affected Software1
Positive Technologies
Positive Technologies
•added 2014/02/07 12:00 a.m.•6 views

PT-2014-4364

Name of the Vulnerable Software and Affected Versions Command School Student Management System version 1.06.01 Description The issue affects the Command School Student Management System, allowing remote attackers to exploit multiple cross-site request forgery CSRF vulnerabilities. This can lead t...

6.8CVSS0.02468EPSS
SaveExploits3References7
Cvelist
Cvelist
•added 2014/02/06 3:00 p.m.•45 views

CVE-2013-7320

Cross-site request forgery CSRF vulnerability in D-Link DAP-2253 Access Point Rev. A1 with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests that modify configuration settings via unspecified vectors...

7.2AI score0.00661EPSS
SaveExploits0References3
NVD
NVD
•added 2014/02/04 10:55 p.m.•25 views

CVE-2012-6493

Cross-site request forgery CSRF vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authentication of unspecified victims for requests that delete scan data and sites via a request to data/site/delete...

6.8CVSS7AI score0.02306EPSS
SaveExploits5References5
Prion
Prion
•added 2014/02/04 10:55 p.m.•29 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authentication of unspecified victims for requests that delete scan data and sites via a request to data/site/delete...

6.8CVSS7.5AI score0.02306EPSS
SaveExploits5References5Affected Software1
NVD
NVD
•added 2014/02/04 9:55 p.m.•31 views

CVE-2014-1694

Multiple cross-site request forgery CSRF vulnerabilities in 1 CustomerPreferences.pm, 2 CustomerTicketMessage.pm, 3 CustomerTicketProcess.pm, and 4 CustomerTicketZoom.pm in Kernel/Modules/ in Open Ticket Request System OTRS 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allow...

6.8CVSS7.2AI score0.01479EPSS
SaveExploits1References12
Rows per page
Query Builder