CVE-2024-28679

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via Photo Collection...

CVE-2024-28671

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/stepselectmain.php...

CVE-2024-28682

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/syscacheup.php...

CVE-2024-28677

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/articlekeywordsmain.php...

CVE-2024-28678

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articledescriptionmain.php...

CVE-2024-28683

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via create file...

CVE-2024-28680

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyadd.php...

CVE-2024-28677

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/articlekeywordsmain.php...

CVE-2024-28671

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/stepselectmain.php...

CVE-2024-28673

CVE-2024-28673 affects DedeCMS v5.7 and describes a Cross-Site Request Forgery (CSRF) vulnerability exploitable via the /dede/mychannel_edit.php endpoint. The NVD/Red Hat and related feeds consistently cite CSRF impact with a CVSSv3.1 base score of 8.8 (High) and a user interaction requirement. T...

CVE-2024-28675

DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability exposed via the /dede/diy_edit.php endpoint. The CVE describes CSRF with high impact potential (C, I, A HIGH; CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). No exploit details are provided in the primary documents; exp...

CVE-2024-28678

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articledescriptionmain.php...

CVE-2024-28666

DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the /dede/media_add.php component. The CVE-2024-28666 entry confirms a CSRF issue with DedeCMS 5.7, with a CVSS v3.1 base score of 5.5 (Medium) and attack vector Network, requiring user interaction and low privileges...

CVE-2024-28670

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistmain.php...

CVE-2023-43275

Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...

CVE-2023-43275

Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...

CVE-2023-43275

CVE-2023-43275 describes a CSRF vulnerability in DedeCMS v5.7, affecting the backend administration interface via the /catalog_add.php endpoint due to lack of verification of the submitted form token. The issue allows attackers to craft pages to trigger unintended actions. Exploitation details ar...

GSD-2023-1002170 tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer

tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.165 by commit...

GSD-2023-1001506 perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box()

perf/x86/intel/uncore: Fix reference count leak in uncoreimcinitbox This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...