The vulnerability of the fromSysToolRestoreSet() function in the microprogramming software for Tenda AC9 allows a attacker to perform a CSRF attack.

The vulnerability of the fromSysToolRestoreSet function in the Tenda AC9 router’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability could allow a remote attacker to execute a CSRF attack...

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application allows a attacker to compromise the integrity of the protected information.

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerability of the 3DSecure (3DS2) protocol, related to the manipulation of inter-site requests, allows a perpetrator to carry out a CSRF attack.

The vulnerability of the 3DSecure 3DS2 protocol is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack by altering the HTTP headers Origin and Referer...

The vulnerability of Symantec’s Privileged Access Management tool, related to the manipulation of inter-site requests, allows a perpetrator to intercept user sessions.

The vulnerability of Symantec’s Privileged Access Management tool is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to intercept user sessions remotely...

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management allows a perpetrator to gain access to read, modify, and delete files.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system relates to the manipulation of inter-site requests. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete file access rights...

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management allows a perpetrator to gain access to read, modify, and delete files.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system relates to the manipulation of inter-site requests. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete file access rights...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the manipulation of inter-site requests, allows a perpetrator to carry out a CSRF attack.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

The vulnerability of software for monitoring, managing, and configuring VigorAP access points and VigorSwitches in the DrayTek VigorConnect local network lies in the inter-site requests that are forged. This allows a perpetrator to carry out a CSRF attack.

The vulnerability of software for monitoring, managing, and configuring VigorAP access points and VigorSwitches in the DrayTek VigorConnect local network is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow a remote attacker to…...

The vulnerability of D-Link DIR-600 router’s microprogramming software, related to the manipulation of inter-site requests, allows a hacker to increase their privileges.

The vulnerability of D-Link DIR-600 router’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to enhance their privileges by intercepting authentication requests remotely...

The vulnerability of the CMS system Netcat, related to the manipulation of inter-site requests, allows a hacker to inject arbitrary JavaScript code.

The vulnerability of the CMS system Netcat is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript code remotely...

The vulnerability of the microprogramming software of Osprey Pump Controller allows a intruder to execute arbitrary commands.

The vulnerability of Microprogrammed Software in Osprey Pump Controller controllers relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially crafted HTTP requests...

The vulnerability of the modoboa/modoboa mail server, related to the manipulation of inter-site requests, allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the modoboa/modoboa mail server is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...

The vulnerability of the Ajax Controller component of the PNP4Nagios network monitoring system allows a attacker to perform a CSRF attack.

The vulnerability of the Ajax Controller component in the PNP4Nagios network monitoring system is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller is related to the falsification of inter-site requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the microprogramming software of Schneider Electric’s programmable logic controllers Modicon M340, Modicon Quantum, and Modicon Premium allows a intruder to gain access to confidential data.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium is related to the falsification of inter-site requests. Exploiting this vulnerability can allow a remote attacker to gain access to...

The vulnerability of microprogrammed software in logic controllers for building and facility control systems, such as Schneider Electric’s spaceLYnk, Wiser for KNX (formerly homeLYnk), and FellerLYnk, allows attackers to alter the configuration of the system.

The vulnerability of microprogramming software for logic controllers used in building and facility control systems, such as Schneider Electric’s spaceLYnk, Wiser for KNX formerly homeLYnk, and FellerLYnk, is related to the exploitation of inter-site requests. Exploiting this vulnerability allows ...

The vulnerability of Nighthawk WiFi 6 Router’s microprogramming software, related to the manipulation of inter-site requests, allows a hacker to perform a CSRF attack.

The vulnerability of Nighthawk WiFi 6 Router RAX30’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

The vulnerability of the Moodle course management system lies in the insufficient verification of the HTTP source in the URL address of the course redirect. This allows attackers to execute attacks by manipulating inter-site requests.

The vulnerability of the Moodle course management system is related to insufficient verification of the HTTP source in the URL address of the course redirect. Exploiting this vulnerability allows a malicious actor to carry out attacks by manipulating inter-site requests...

The vulnerability of the iControl SOAP interface for access control and remote authentication in BIG-IP and server software, BIG-IQ Centralized Management, allows a perpetrator to execute arbitrary commands with elevated privileges.

The vulnerability of the iControl SOAP interface for access control and remote authentication in BIG-IP and server software, BIG-IQ Centralized Management, is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

The vulnerability in the HTTP web interface of the software for high-voltage distribution device monitoring systems from Hitachi Modular Switchgear Monitoring (MSM) allows a perpetrator to execute arbitrary code.

The vulnerability of the HTTP web interface of the performance measurement software for Hitachi Modular Switchgear Monitoring systems is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...