CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7653 matches found

NVD•added 2019/08/27 3:15 p.m.•51 views

CVE-2019-11457

Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...

8.8CVSS8.8AI score0.01159EPSS

SaveExploits2References3

OSV•added 2019/08/27 3:15 p.m.•22 views

PYSEC-2019-174

8.8CVSS3.5AI score0.01159EPSS

SaveExploits2References4

PyPA•added 2019/08/27 3:15 p.m.•13 views

PYSEC-2019-174

8.8CVSS7.1AI score0.01159EPSS

SaveExploits2References4Affected Software1

Prion•added 2019/08/27 3:15 p.m.•19 views

Cross site request forgery (csrf)

6.8CVSS8.7AI score0.01159EPSS

SaveExploits2References3Affected Software1

CVE•added 2019/08/27 2:52 p.m.•135 views

CVE-2019-11457

CVE-2019-11457 : The connected Red Hat, OSV and related advisories corroborate multiple CSRF issues in MicroPyramid Django CRM 0.2.1. Affected endpoints include /change-password-by-admin/, /api/settings/add/, /cases/create/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/cr...

8.8CVSS8.6AI score0.01159EPSS

SaveExploits2References3Affected Software1

Cvelist•added 2019/08/27 2:52 p.m.•63 views

CVE-2019-11457

8.8CVSS8.8AI score0.01159EPSS

SaveExploits2References3

CNVD•added 2019/08/27 12:00 a.m.•14 views

django-js-reverse cross-site scripting vulnerability

django-js-reverse is a Django application for handling URL naming. A cross-site scripting vulnerability exists in versions prior to django-js-reverse 0.9.1, which can be exploited by an attacker to execute client-side code...

6.1CVSS6.3AI score0.01043EPSS

SaveExploits0References1

Veracode•added 2019/08/26 8:17 a.m.•25 views

Cross-site Scripting (XSS)

django-js-reverse is vulnerable to cross-site scripting XSS. The attack is possible because it does not escape the entities via jsreverseinline...

6.1CVSS2.5AI score0.01043EPSS

SaveExploits0References3Affected Software1

zdt•added 2019/08/26 12:00 a.m.•82 views

Django CRM 0.2.1 Cross Site Request Forgery Vulnerability

Exploit for php platform in category web applications Information -------------------- Advisory by Netsparker Name: Multiple CSRF Vulnerabilities in Django CRM 0.2.1 Affected Software: Django CRM Affected Versions: 0.2.1 Homepage: https://github.com/MicroPyramid/Django-CRM Vulnerability: Cross-si...

6.8CVSS0.1AI score0.01159EPSS

SaveExploits2

Symantec•added 2019/08/26 12:00 a.m.•34 views

MicroPyramid Django CRM CVE-2019-11457 Multiple Cross Site Request Forgery Vulnerabilities

Description MicroPyramid Django CRM is prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. MicroPyramid Django CRM version 0.2.1 is vulnerable...

6.8CVSS0.3AI score0.01159EPSS

SaveExploits2References1Affected Software1

Packet Storm•added 2019/08/26 12:00 a.m.•364 views

Django CRM 0.2.1 Cross Site Request Forgery

Information -------------------- Advisory by Netsparker Name: Multiple CSRF Vulnerabilities in Django CRM 0.2.1 Affected Software: Django CRM Affected Versions: 0.2.1 Homepage: https://github.com/MicroPyramid/Django-CRM Vulnerability: Cross-site Request Forgery Severity: 8.8 High Status: Not Fixe...

1AI score0.01159EPSS

SaveExploits2

NVD•added 2019/08/23 1:15 p.m.•23 views

CVE-2019-15486