PT-2021-20009

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions 1.7.5 and prior Description The issue allows an attacker to cause a user to carry out an action unintentionally through cross-site request forgery. Recommendations For Delta Electronics DIAEnergie versions...

PT-2020-8657

Name of the Vulnerable Software and Affected Versions: Helpdesk versions prior to 3.0.3 Description: The issue is a cross-site request forgery CSRF vulnerability that could allow attackers to force NAS users to execute unintentional actions through a web application. This vulnerability affects...

CVE-2018-19948: Cross-Site Request Forgery (CSRF)

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this cross-site request forgery CSRF vulnerability could allow attackers to force NAS users to execute unintentional actions through a web application. QNAP has already fixed the issue in Helpdesk 3.0.3 and...