2167 matches found
CVE-2020-8818: Origin Validation Error
An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php allows an attacker to remotely replace critical plugin settings merchant ID, secret key, etc. and therefor...
CVE-2020-8819: Origin Validation Error
An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce. Lack of origin authentication in the IPN callback processing function in cardgate/cardgate.php allows an attacker to remotely replace critical plugin settings merchant ID, secret key, etc. and therefore bypass...
Auto-Maskin RP210E, DCU210E, and Marine Observer Pro (Android App)
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Auto-Maskin Equipment: RP 210E Remote Panels, DCU 210E Control Units, and Marine Observer Pro Android App Vulnerabilities: Cleartext Transmission of Sensitive Information, Origin Validation Error,...
CVE-2019-4640: Origin Validation Error
IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046...
CVE-2020-0695: Origin Validation Error
A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Server Spoofing Vulnerability'...
Security Updates for Microsoft Office Online Server (February 2020)
The Microsoft Office Online Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly. An attacker...
CVE-2019-16517: Origin Validation Error
An issue was discovered in ConnectWise Control formerly known as ScreenConnect 19.3.25270.7185. There is a CORS misconfiguration, which reflected the Origin provided by incoming requests. This allowed JavaScript running on any domain to interact with the server APIs and perform administrative...
PT-2020-1321
Name of the Vulnerable Software and Affected Versions Office Online affected versions not specified Office Online Server affected versions not specified Description A spoofing issue exists due to incorrect validation of origin in cross-origin communications. This could allow a remote attacker to...
CVE-2019-11762: Origin Validation Error
If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call arbitrary DOM methods/getters/setters on the now-cross-origin window. This vulnerability affects Firefox 70, Thunderbird 68.2, and Firefox ESR 68.2...
CVE-2019-13740: Origin Validation Error
Incorrect security UI in sharing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page...
CVE-2019-19545: Origin Validation Error
Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing CORS vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served...
SAP NetWeaver Process Integration Data Forgery Issue Vulnerability
SAP NetWeaver Process Integration PI is an SAP enterprise application integration software from SAP, Germany, and is a component of the NetWeaver product group. The component is mainly used for the exchange of information between the internal system and the external. A vulnerability exists in SAP...
Microsoft Office Online Server Spoofing Vulnerability
Microsoft Office Online Server is a Web-based office software suite. A spoofing vulnerability exists in Microsoft Office Online Server that originates when Office Online does not properly validate the origin in a cross-domain communication handler. An attacker could exploit this vulnerability by...
CVE-2019-1445: Origin Validation Error
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1447...
CVE-2019-1447: Origin Validation Error
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1445...
CVE-2019-1442: Origin Validation Error
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'...
PT-2019-3905
Name of the Vulnerable Software and Affected Versions Office Online affected versions not specified Office Online Server affected versions not specified Description A spoofing issue exists due to incorrect validation of origin in cross-origin communications handlers. This can be exploited by a...
CVE-2019-15020: Origin Validation Error
A security vulnerability exists in the Zingbox Inspector versions 1.293 and earlier, that could allow an attacker to supply an invalid software update image to the Zingbox Inspector that could result in command injection...