Vulnerability index

Browse CVEs

7,378 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-Site Request Forgery (CSRF)CWE-352 × clear
Insight Control Power Management MEDIUM 6.8
CVE-2010-4024

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to hijack the authenticatio…

Fix: after 6.1.2
Fix from $1,600 2010-10-28
Insight Control Virtual Machine Management MEDIUM 6.8
CVE-2010-3989

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the aut…

Fix: after 6.1.2
Fix from $1,600 2010-10-28
Systems Insight Manager MEDIUM 6.8
CVE-2010-3288

Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to hijack the authentication o…

Fix: after 6.1
Fix from $1,600 2010-10-23
Cms Made Simple MEDIUM 6.8
CVE-2010-3883

Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote attackers t…

Fix: after 1.7.1
Fix from $1,600 2010-10-08
Cms Made Simple MEDIUM 6.8
CVE-2010-3884

Cross-site request forgery (CSRF) vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack the authentication of administ…

Fix: after 1.8.1
Fix from $1,600 2010-10-08
Mojoportal MEDIUM 6.8
CVE-2010-3603

Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.3.4.3 and 2.3.5.1 allows remo…

Patch available
Fix from $1,600 2010-09-24
Chrome MEDIUM 6.8
CVE-2010-1767

Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome b…

Fix: after 4.1.249.1058
Fix from $1,600 2010-09-24
Santafox MEDIUM 6.8
CVE-2010-3464

Cross-site request forgery (CSRF) vulnerability in admin/manager_users.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to h…

No fix yet
Fix from $1,600 2010-09-17
Proventia Network Mail Security System Virtual Appliance MEDIUM 6.8
CVE-2010-0153

Multiple cross-site request forgery (CSRF) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System …

Mitigation only
Fix from $1,600 2010-09-14
Outlook Web Access MEDIUM 6.8
CVE-2010-3213EPSS 8%

Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the a…

No fix yet
Fix from $1,600 2010-09-07
Twiki MEDIUM 6.8
CVE-2009-4898

Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.2 allows remote attackers to hijack the authentication of arbitrary users for req…

Fix: after 4.3.1
Fix from $1,600 2010-09-07
Photokorn Gallery MEDIUM 6.8
CVE-2009-4981

Multiple cross-site request forgery (CSRF) vulnerabilities in Photokorn Gallery 1.81 allow remote attackers to hijack the authentication of administr…

Fix: after 1.81
Fix from $1,600 2010-08-25
Couchdb MEDIUM 6.8
CVE-2010-2234

Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of admini…

Mitigation only
Fix from $1,600 2010-08-19
Open Blog MEDIUM 6.8
CVE-2010-3030

Cross-site request forgery (CSRF) vulnerability in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote attackers to hijack the authenti…

Mitigation only
Fix from $1,600 2010-08-17
Diamondlist MEDIUM 6.8
CVE-2010-3024

Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in DiamondList 0.1.6, and possibly earlier, allow remote attacker…

No fix yet
Fix from $1,600 2010-08-16
Insight Software Installer MEDIUM 6.8
CVE-2010-1971

Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authent…

Fix: after 6.0
Fix from $1,600 2010-07-15
Insight Software Installer MEDIUM 6.8
CVE-2010-1968

Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authent…

Fix: after 6.0
Fix from $1,600 2010-07-15
Mahara MEDIUM 6.8
CVE-2010-1668

Multiple cross-site request forgery (CSRF) vulnerabilities in Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 allow remote attackers…

Fix: after 1.0.14
Fix from $1,600 2010-07-06
Snare Agent MEDIUM 6.8
CVE-2010-2594

Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Sol…

Fix: after 3.2.3
Fix from $1,600 2010-07-02
Moodle MEDIUM 6.8
CVE-2010-2231

Cross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.13 and 1.9.x before 1.9.9 allow…

Fix: after 1.8.12
Fix from $1,600 2010-06-28
Acc Statistics MEDIUM 6.8
CVE-2009-4905

Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of …

No fix yet
Fix from $1,600 2010-06-25
Acc Php Email MEDIUM 6.8
CVE-2009-4906

Cross-site request forgery (CSRF) vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrat…

No fix yet
Fix from $1,600 2010-06-25
Oblog MEDIUM 6.8
CVE-2009-4907

Multiple cross-site request forgery (CSRF) vulnerabilities in oBlog allow remote attackers to hijack the authentication of administrators for request…

No fix yet
Fix from $1,600 2010-06-25
Odcms MEDIUM 6.8
CVE-2010-2345

Cross-site request forgery (CSRF) vulnerability in odCMS 1.06, and possibly earlier, allows remote attackers to hijack the authentication of administ…

Mitigation only
Fix from $1,600 2010-06-21
Mac Os X MEDIUM 6.0
CVE-2010-0540

Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.…

Patch available
Fix from $1,600 2010-06-17
Rock Web Server MEDIUM 6.8
CVE-2010-2268

Cross-site request forgery (CSRF) vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to hijack th…

No fix yet
Fix from $1,600 2010-06-15
Tomatocms MEDIUM 5.1
CVE-2010-2282

Cross-site request forgery (CSRF) vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication of administrators for request…

Mitigation only
Fix from $1,600 2010-06-15
Plume Cms MEDIUM 6.8
CVE-2010-2294

Cross-site request forgery (CSRF) vulnerability in Plume CMS 1.2.4 and possibly earlier allows remote attackers to hijack the authentication of admin…

Fix: after 1.2.4
Fix from $1,600 2010-06-15
Mediawiki MEDIUM 6.8
CVE-2010-1648

Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote atta…

Patch available
Fix from $1,600 2010-06-08
Scientific Atlanta Webstar Dpc2100r2 MEDIUM 6.8
CVE-2010-2025

Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with fi…

No fix yet
Fix from $1,600 2010-05-26