Lucene search
+L

9757 matches found

Snyk
Snyk
•added 2026/08/31 3:10 p.m.•11 views

Cross-site Request Forgery (CSRF)

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

5.1CVSS5.3AI score0.00251EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/31 3:01 p.m.•4 views

SUSE-SU-2026:3897-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issue: Update to Mozilla Thunderbird 140.14. - MFSA 2026-79 bsc1274867 CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component CVE-2026-74935: Privilege escalation in the DOM: Networking component CVE-2026-74936:...

9.8CVSS6.3AI score0.00715EPSS
SaveExploits4References33
CVE
CVE
•added 2026/08/31 11:46 a.m.•21 views

CVE-2026-71378

ResourceIsolationRequestCycleListener protects a Wicket application against cross-site request forgery by rejecting requests that a resource isolation policy judges to come from another origin. Its default policy, FetchMetadataResourceIsolationPolicy, was derived from a reference implementation...

4.6CVSS5.8AI score0.00251EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2025-56798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges vi...

8.8CVSS5.9AI score0.00241EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/31 12:00 a.m.•0 views

CVE-2026-71378: Cross-Site Request Forgery (CSRF)

ResourceIsolationRequestCycleListener protects a Wicket application against cross-site request forgery by rejecting requests that a resource isolation policy judges to come from another origin. Its default policy, FetchMetadataResourceIsolationPolicy, was derived from a reference implementation...

4.6CVSS5.5AI score0.00251EPSS
SaveExploits0References4
CVE
CVE
•added 2026/08/28 8:20 p.m.•29 views

CVE-2026-55696

PrivateBin versions prior to 2.0.5 contain a stored XSS vulnerability in the attachment download link. The root cause is that DOMPurify sanitization in AttachmentViewer.setAttachment only applies to image/*svg MIME types, and the resulting sanitized blob is assigned to a local variable used for t...

4.3CVSS6AI score0.00368EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•1 views

CVE-2026-55696: Improper Neutralization of Input During Web Page Generation

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, AttachmentViewer.setAttachment in js/privatebin.js uses getAttachmentMimeType to accept attacker-controlled MIME types and uses getBlobUrl to create a same-origin blob before setting...

4.3CVSS6AI score0.00368EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/27 12:00 a.m.•39 views

TencentOS Server 3: thunderbird (TSSA-2026:0924)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0924 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

9.8CVSS6.8AI score0.00521EPSS
SaveExploits1References34
NVD
NVD
•added 2026/08/26 6:16 p.m.•18 views

CVE-2025-56798

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

8.8CVSS0.00241EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/26 12:00 a.m.•40 views

CVE-2025-56798

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

0.00241EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/26 12:00 a.m.•11 views

CVE-2025-56798

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

5.9AI score0.00241EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/26 12:00 a.m.•14 views

EUVD-2025-210782

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

5.4AI score0.00241EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/26 12:00 a.m.•0 views

CVE-2025-56798: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

8.8CVSS5.9AI score0.00241EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/26 12:00 a.m.•25 views

CVE-2025-56798

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

8.8CVSS5.4AI score0.00241EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/26 12:00 a.m.•14 views

PT-2026-82230

Cross-Site Request Forgery CSRF vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to escalate privileges via the Unraid authentication cookie's lax same-site policy...

5.4AI score0.00241EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/25 1:30 a.m.•39 views

CVE-2026-72702 Grav CMS before 2.0.16 Origin Validation Bypass via Referer

Grav CMS before 2.0.16 contains an origin validation bypass in the Uri::referrer and Pages::referrerRoute methods, which validate the Referer header using an unanchored string prefix match strstartswith$referrer, $base with no trailing delimiter. An attacker who controls a domain that begins with...

9.3CVSS0.00149EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/08/25 12:27 a.m.•28 views

Exploit for Improper Isolation or Compartmentalization in Mozilla Firefox

CVE-2026-12295 — srcdoc data on a non-about:srcdoc URI Firefo...

9.6CVSS8.6AI score0.00454EPSS
SaveExploits3
RedHat Linux
RedHat Linux
•added 2026/08/24 10:24 a.m.•14 views

firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Graphics: ImageLib component...

5.4CVSS5.2AI score0.00169EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/08/24 10:24 a.m.•18 views

firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component...

5.4CVSS5.2AI score0.00165EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/08/24 10:24 a.m.•13 views

firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Networking: Cookies component...

5.4CVSS5.2AI score0.00165EPSS
SaveExploits0References6
Rows per page
Query Builder