12 matches found
EUVD-2019-13478
Malware in sbrugna...
EUVD-2016-3147
Malware in sbrugna...
EUVD-2013-3451
Malware in sbrugna...
EUVD-2023-49666
Malicious code in bioql PyPI...
EUVD-2022-15736
Malicious code in bioql PyPI...
CVE-2020-26033
An issue was discovered in Zammad before 3.4.1. The Tag and Link REST API endpoints for add and delete lack a CSRF token check...
Linux Distros Unpatched Vulnerability : CVE-2021-43332
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentiall...
Linux Distros Unpatched Vulnerability : CVE-2019-3864
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in all quay-2 versions before quay-3.0.0, in the Quay web GUI where POST requests include a specific parameter which is used as a...
CVE-2019-15002
CVE-2019-15002 is a CSRF vulnerability affecting Atlassian Jira 7.6.4–8.1.0 where the login form does not require a CSRF token, enabling an attacker to log a user into an account without their consent. The issue is documented across multiple sources (NVD/NVD-derived entries, TALOS, and PT Securit...
Centreon Web Cross-Site Request Forgery Vulnerability
Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A cross-site request forgery vulnerability exists in Centreon-Web in Centreon Platform version 20.10...
CVE-2016-2041
libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not use a constant-time algorithm for comparing CSRF tokens, which makes it easier for remote attackers to bypass intended access restrictions by measuring time differences...
CVE-2016-2039
libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, which allows remote attackers to bypass intended access restrictions by predicting a value...