CVE-2016-1151

Cybozu Office is affected by CVE-2016-1151, with CSRF vulnerabilities in versions 9.9.0 through 10.3.0 that can hijack the authentication of arbitrary users. Public sources in the connected documents confirm the affected product and versions, and describe the impact as cross-site request forgery ...

CVE-2016-1151

Multiple cross-site request forgery CSRF vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-0863

Cross-site request forgery CSRF vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-7678

Multiple cross-site request forgery CSRF vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Organizations and Remediation management page in Enterprise Manager in McAfee Vulnerability Manager MVM before 7.5.10 allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via...

CVE-2016-2199

Multiple cross-site request forgery CSRF vulnerabilities in the Organizations and Remediation management page in Enterprise Manager in McAfee Vulnerability Manager MVM before 7.5.10 allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-5007

CVE-2015-5007 describes a cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce. Affected versions are 6.0 up to 6.0.0.11, 7.0 up to 7.0.0.9, and 7.0 Feature Pack 8. The issue allows remote authenticated users to hijack the authentication of arbitrary users via requests that i...

CVE-2015-5445

Cross-site request forgery CSRF vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-5445

Cross-site request forgery CSRF vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-7407

Cross-site request forgery CSRF vulnerability in Lotus Mashups in IBM Mashup Center 3.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2015-5990

Belkin N600 DB Wireless Dual Band N+ router (model F9K1102 v2) with firmware 2.10.17 is vulnerable to a CSRF flaw (CVE-2015-5990) that can allow an attacker to hijack the user’s authenticated session. The CERT/CC entry attributes multiple issues to this device family, with CVE-2015-5990 specifica...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on ReadyNet WRT300N-DD devices with firmware 1.0.26 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7936

Cross-site request forgery CSRF vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the authentication of administrators for requests that modify a password...

CVE-2015-7936

CVE-2015-7936: CSRF vulnerability in Motorola Solutions MOSCAD IP Gateway’s web-based management enables remote attackers to hijack an administrator’s session to change a password. Affected product: MOSCAD IP Gateway (all versions) with web access; root cause described as CSRF without proper anti...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Cisco DPQ3925 devices with EDVA 5.5.2 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv05943...

CVE-2015-6378

The CVE-2015-6378 entry corresponds to a CSRF vulnerability in Cisco DPQ3925 devices with EDVA 5.5.2. The root cause is insufficient CSRF protections in the device web interface, enabling a remote attacker to hijack the authentication of arbitrary users by enticing them to visit a malicious link,...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Unity Connection 11.50.98 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCux24578...