404 matches found
Tenda AX12 Cross-Site Request Forgery Vulnerability (CNVD-2022-63551)
Tenda AX12 is a dual-band gigabit Wifi 6 wireless router from Tenda, China.Tenda AX12 V22.03.01.21CN is vulnerable to cross-site request spoofing. users, an attacker could use the vulnerability to spoof malicious requests to trick victims into clicking to perform sensitive operations...
Server-side Request Forgery (SSRF)
shopware/platform is vulnerable to server-side request forgery. An attacker can read or update internal resources by sending malicious requests on behalf of the server into the admin SDK functionality...
Selenium Server 跨站请求伪造漏洞
Selenium Grid is an intelligent proxy server for the Selenium community. It can easily run tests in parallel on multiple machines.A cross-site request spoofing vulnerability exists in versions prior to Selenium Server 4, which can be exploited by attackers to spoof malicious requests to trick...
Siemens SCALANCE X-300 Switch Family Devices Cross-Site Scripting Vulnerability
SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs.SIPLUS extreme is designed for reliable operation under extreme conditions. A cross-site scripting vulnerability exists in Siemens SCALANCE X-300 Switch Famil...
WordPress Library File Manager plugin跨站请求伪造漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Library File Manager plugin has a cross-site request forgery vulnerability, which stems from the fact that the plugin uses a...
WordPress Church Admin plugin cross-site request forgery vulnerability
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site request forgery vulnerability exists in the...
CVE-2020-22845
A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service DOS via crafted FTP requests...
YzmCMS Cross-site Request Forgery Vulnerability (CNVD-2022-12752)
YzmCMS is an open source CMS Content Management System.A cross-site request spoofing vulnerability exists in YzmCMS, which stems from insufficient validation in admin.add that the request is coming from a trusted user. An attacker could use this vulnerability to spoof malicious requests to trick...
Moodle Cross-Site Request Forgery Vulnerability (CNVD-2022-08151)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site request forgery vulnerability exists in Moodle 3.11 through 3.11.4, 3.10 through 3.10.8, and 3.9 through 3.9.11, which ste...
mysiteforme Cross-Site Request Forgery Vulnerability
Mysiteforme is a permission management system. A cross-site request forgery vulnerability exists in mysiteforme, which stems from a lack of validation for cross-site request forgery in the backend blog administration. An attacker could use a forged malicious request to trick a victim into clickin...
livehelperchat cross-site request forgery vulnerability (CNVD-2022-08039)
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability exists in livehelperchat, which stems from a WEB application that does not adequately validate whether a request is coming from a truste...
Jenkins Bitbucket Branch Source Plugin Cross-Site Request Forgery Vulnerability
Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plug-ins to support building, deploying and automating any project . The Jenkins Bitbucket Branch Source Plugin suffers from a cross-site request forgery vulnerability that stems from a WE...
WordPress Single Post Exporter plugin cross-site request forgery vulnerability
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . Single Post Exporter plugin is a WordPress open source application plugin. WordPress Single Post Exporter plugin in version 1.1 and earlier contains a cross-site request forgery vulnerability, whic...
Denial Of Service (DoS)
golang is vulnerable to denial of service. The vulnerability exists due to an uncontrolled resource consumption flaw in golang's net/http library in the canonicalHeader function which allows an attacker to submits maliciously crafted requests to applications linked with net/http's http2...
Apache Log4j2 Remote Code Execution Vulnerability
Apache Log4j2 is a Java logging framework. Apache Log4j2 remote code execution vulnerability, due to the existence of recursive parsing of certain Apache Log4j2 features, an attacker can use the vulnerability to directly construct malicious requests and trigger remote code execution...
WordPress Tawk.To Live Chat plugin cross-site request forgery vulnerability
WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress Tawk.To Live Chat plugin in versions prior to 0.6.0 suffers from a cross-site request forgery...
Cross-site Request Forgery (CSRF)
pterodactyl is vulnerable to cross-site forgery request. The vulnerability exists due to an improperly configured CSRF protection which allows an attacker to submit malicious requests on behalf of the user...
PT-2021-4722 · Cisco · Cisco Ftd +1
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the web services interface of Cisco Adaptive Security...
