CVE-2021-20126

Draytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request...

The vulnerability of the software system for managing enterprise assets in IBM Maximo Asset Management lies in the insufficient verification of incoming requests, allowing a hacker to execute an SSRF attack.

The vulnerability of the IBM Maximo Asset Management software system for managing corporate assets is related to insufficient verification of incoming requests. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute an SSRF attack...