Vulnerability index

Browse CVEs

7,378 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-Site Request Forgery (CSRF)CWE-352 × clear
Dap 1360 Firmware MEDIUM 6.8
CVE-2014-10025

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 with firmware 2.5.4 and earlier allow remote attackers to hijack the au…

Fix: after 2.5.4
Fix from $1,600 2015-01-13
T2 B Gawv1.4u10y Bi MEDIUM 6.8
CVE-2014-10019

Multiple cross-site request forgery (CSRF) vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remo…

No fix yet
Fix from $1,600 2015-01-13
Event Booking Calendar MEDIUM 6.8
CVE-2014-10014

Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authenticati…

No fix yet
Fix from $1,600 2015-01-13
Stark Crm MEDIUM 6.8
CVE-2014-10008

Multiple cross-site request forgery (CSRF) vulnerabilities in Stark CRM 1.0 allow remote attackers to hijack the authentication of administrators for…

No fix yet
Fix from $1,600 2015-01-13
Maian Uploader MEDIUM 6.8
CVE-2014-10006

Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the authentication of unspecified u…

No fix yet
Fix from $1,600 2015-01-13
Appointment Scheduler MEDIUM 6.8
CVE-2014-10001

Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attackers to hijack the authenticatio…

No fix yet
Fix from $1,600 2015-01-13
Dir 600 Firmware HIGH 8.0
CVE-2014-100005 KEVEPSS 42%

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to …

Fix: after 2.16ww
Fix from $1,950 2015-01-13
Seo Plugin Liveoptim MEDIUM 6.8
CVE-2014-100001

Cross-site request forgery (CSRF) vulnerability in the SEO Plugin LiveOptim plugin before 1.1.4-free for WordPress allows remote attackers to hijack …

Patch available
Fix from $1,600 2015-01-13
Gd Star Rating MEDIUM 6.8
CVE-2014-2838

Multiple cross-site request forgery (CSRF) vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the auth…

No fix yet
Fix from $1,600 2015-01-12
Tl Wr840n Firmware MEDIUM 6.8
CVE-2014-9510

Cross-site request forgery (CSRF) vulnerability in the administration console in TP-Link TL-WR840N (V1) router with firmware before 3.13.27 build 141…

Patch available
Fix from $1,600 2015-01-09
Webex Meetings Server MEDIUM 6.8
CVE-2014-8031

Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary user…

Mitigation only
Fix from $1,600 2015-01-09
Banner Effect Header MEDIUM 6.8
CVE-2015-0920

Cross-site request forgery (CSRF) vulnerability in the Banner Effect Header plugin 1.2.6 for WordPress allows remote attackers to hijack the authenti…

No fix yet
Fix from $1,600 2015-01-08
Documentum Wdk MEDIUM 6.8
CVE-2014-4636

Cross-site request forgery (CSRF) vulnerability in EMC Documentum Web Development Kit (WDK) before 6.8 allows remote attackers to hijack the authenti…

Fix: after 6.7
Fix from $1,600 2015-01-07
Facebook Like Box MEDIUM 6.8
CVE-2014-9524

Multiple cross-site request forgery (CSRF) vulnerabilities in the Facebook Like Box (cardoza-facebook-like-box) plugin before 2.8.3 for WordPress all…

Fix: after 2.8.2
Fix from $1,600 2015-01-05
Timed Popup MEDIUM 6.8
CVE-2014-9525

Multiple cross-site request forgery (CSRF) vulnerabilities in the Timed Popup (wp-timed-popup) plugin 1.3 for WordPress allow remote attackers to hij…

No fix yet
Fix from $1,600 2015-01-05
Our Team Showcase MEDIUM 6.8
CVE-2014-9523

Multiple cross-site request forgery (CSRF) vulnerabilities in the Our Team Showcase (our-team-enhanced) plugin before 1.3 for WordPress allow remote …

Fix: after 1.2
Fix from $1,600 2015-01-05
Quick Page\/post Redirect MEDIUM 6.8
CVE-2014-2598

Cross-site request forgery (CSRF) vulnerability in the Quick Page/Post Redirect plugin before 5.0.5 for WordPress allows remote attackers to hijack t…

Fix: after 5.0.4
Fix from $1,600 2015-01-05
Mediawiki MEDIUM 5.1
CVE-2014-9276

Cross-site request forgery (CSRF) vulnerability in the Special:ExpandedTemplates page in MediaWiki before 1.19.22, 1.20.x through 1.22.x before 1.22.…

Fix: after 1.19.21
Fix from $1,600 2015-01-04
Kandidat Cms MEDIUM 6.8
CVE-2010-5319

Multiple cross-site request forgery (CSRF) vulnerabilities in Kandidat CMS 1.4.2 allow remote attackers to hijack the authentication of administrator…

No fix yet
Fix from $1,600 2015-01-03
Memht Portal MEDIUM 6.8
CVE-2010-5320

Multiple cross-site request forgery (CSRF) vulnerabilities in MemHT Portal 4.0.1 allow remote attackers to hijack the authentication of administrator…

No fix yet
Fix from $1,600 2015-01-03
Bedita MEDIUM 6.8
CVE-2010-5315

Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of administrators…

Fix: after 3.0.1.2550_
Fix from $1,600 2015-01-03
Wp Vipergb MEDIUM 6.8
CVE-2014-9460

Multiple cross-site request forgery (CSRF) vulnerabilities in the WP-ViperGB plugin before 1.3.11 for WordPress allow remote attackers to hijack the …

Fix: after 1.3.10
Fix from $1,600 2015-01-02
E107 MEDIUM 6.8
CVE-2014-9459

Cross-site request forgery (CSRF) vulnerability in the AdminObserver function in e107_admin/users.php in e107 2.0 alpha2 allows remote attackers to h…

Patch available
Fix from $1,600 2015-01-02
Simple Sticky Footer MEDIUM 6.8
CVE-2014-9454

Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Sticky Footer plugin before 1.3.3 for WordPress allow remote attackers to hi…

Fix: after 1.3.2
Fix from $1,600 2015-01-02
Lightbox Photo Gallery MEDIUM 6.8
CVE-2014-9441

Multiple cross-site request forgery (CSRF) vulnerabilities in the Lightbox Photo Gallery plugin 1.0 for WordPress allow remote attackers to hijack th…

No fix yet
Fix from $1,600 2015-01-02
Vbulletin MEDIUM 6.8
CVE-2014-9438

Cross-site request forgery (CSRF) vulnerability in the Moderator Control Panel in vBulletin 4.2.2 allows remote attackers to hijack the authenticatio…

No fix yet
Fix from $1,600 2015-01-02
Sliding Social Icons MEDIUM 6.8
CVE-2014-9437

Multiple cross-site request forgery (CSRF) vulnerabilities in the Sliding Social Icons plugin 1.61 for WordPress allow remote attackers to hijack the…

No fix yet
Fix from $1,600 2015-01-02
Diafan.cms MEDIUM 6.8
CVE-2011-5318

Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the authentication of administra…

Fix: after 5.0
Fix from $1,600 2015-01-01
Whcms MEDIUM 6.8
CVE-2011-5315

Cross-site request forgery (CSRF) vulnerability in admin/index.php in whCMS 0.115 alpha allows remote attackers to hijack the authentication of admin…

No fix yet
Fix from $1,600 2015-01-01
Cambio MEDIUM 6.8
CVE-2011-5316

Cross-site request forgery (CSRF) vulnerability in admin/index.php in Cambio 0.5a nightly r37 allows remote attackers to hijack the authentication of…

No fix yet
Fix from $1,600 2015-01-01