Browse CVEs

HIGH 8.8 CVE-2018-7700EPSS 75% DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tag_test_action.php request can specify a runphp… Dedecms No fix yet Fix from $1,9502018-03-27 HIGH 8.0 CVE-2018-8718EPSS 7% Cross-site request forgery (CSRF) vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized ma… Mailer after 1.20 Fix from $1,9502018-03-27 HIGH 8.8 CVE-2018-8764 Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 places a CSRF token in the sec_token parameter of a URI, which makes it easier for … Debian Linux 6.3+ Fix from $1,9502018-03-27 HIGH 8.8 CVE-2018-1213 Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.… Emc Isilon Onefs after 8.1.0.1 Fix from $1,9502018-03-26 HIGH 8.8 CVE-2018-8817 Wampserver before 3.1.3 has CSRF in add_vhost.php. Wampserver 3.1.3+ Fix from $1,9502018-03-25 HIGH 8.8 CVE-2018-8979 Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI. Open Audit No fix yet Fix from $1,9502018-03-25 HIGH 8.8 CVE-2018-8972 Creditwest Bank CMS Project (aka CWCMS) through 2017-07-28 has CSRF in the functionality for updating the site configuration, which allows remote att… Cwcms 2017-07-28+ Fix from $1,9502018-03-24 HIGH 8.8 CVE-2018-1000137 I, Librarian version 4.8 and earlier contains a Cross site Request Forgery (CSRF) vulnerability in users.php that can result in the password of the a… I\, Librarian after 4.8 Fix from $1,9502018-03-23 HIGH 8.8 CVE-2018-7524 A cross-site request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP… G Cam\/efd 2250 Firmware Mitigation only Fix from $1,9502018-03-22 HIGH 8.0 CVE-2017-0933 Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from a Cross-Site Request Forgery (CSRF) vulnerability. An attacker with access to an operato… Edgeos after 1.9.1 Fix from $1,9502018-03-22 HIGH 8.8 CVE-2018-1230 Pivotal Spring Batch Admin, all versions, does not contain cross site request forgery protection. A remote unauthenticated user could craft a malicio… Spring Batch Admin Mitigation only Fix from $1,9502018-03-21 HIGH 8.8 CVE-2014-1457 Open Web Analytics (OWA) before 1.5.6 improperly generates random nonce values, which makes it easier for remote attackers to bypass a CSRF protectio… Open Web Analytics 1.5.6+ Fix from $1,9502018-03-20 HIGH 8.8 CVE-2018-8811 Cross-site request forgery (CSRF) vulnerability in system/workplace/admin/accounts/user_role.jsp in OpenCMS 10.5.3 allows remote attackers to hijack … Opencms No fix yet Fix from $1,9502018-03-20 HIGH 8.8 CVE-2014-2274 Cross-site request forgery (CSRF) vulnerability in the Subscribe To Comments Reloaded plugin before 140219 for WordPress allows remote attackers to h… Subscribe To Comments Reloaded after 140204 Fix from $1,9502018-03-19 HIGH 8.8 CVE-2014-2550 Cross-site request forgery (CSRF) vulnerability in the Disable Comments plugin before 1.0.4 for WordPress allows remote attackers to hijack the authe… Disable Comments Project 1.0.4+ Fix from $1,9502018-03-19 MEDIUM 6.5 CVE-2014-2675 Cross-site request forgery (CSRF) vulnerability in inc/AdminPage.php in the WP HTML Sitemap plugin 1.2 for WordPress allows remote attackers to hijac… Wp Html Sitemap No fix yet Fix from $1,6002018-03-19 MEDIUM 6.5 CVE-2014-4613 Cross-site request forgery (CSRF) vulnerability in the administration panel in Piwigo before 2.6.2 allows remote attackers to hijack the authenticati… Piwigo 2.6.2+ Fix from $1,6002018-03-16 HIGH 8.8 CVE-2018-6224 A lack of cross-site request forgery (CSRF) protection vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to submit au… Email Encryption Gateway Patch available Fix from $1,9502018-03-15 HIGH 8.8 CVE-2018-8717 joyplus-cms 1.6.0 has CSRF, as demonstrated by adding an administrator account via a manager/admin_ajax.php?action=save&tab={pre}manager request. Joyplus Cms No fix yet Fix from $1,9502018-03-15 MEDIUM 6.5 CVE-2018-7701 Multiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501 allow remote attackers to hijack the authentication… Securmail 9.2.501+ Fix from $1,6002018-03-15 HIGH 8.8 CVE-2018-7677 A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4 Identity Server component. Access Manager Mitigation only Fix from $1,9502018-03-14 HIGH 8.8 CVE-2018-1000086 NPR Visuals Team Pym.js version versions 0.4.2 up to 1.3.1 contains a Cross ite Request Forgery (CSRF) vulnerability in Pym.js _onNavigateToMessage f… Pym.js after 1.3.1 Fix from $1,9502018-03-13 HIGH 8.8 CVE-2018-1000092 CMS Made Simple version versions 2.2.5 contains a Cross ite Request Forgery (CSRF) vulnerability in Admin profile page that can result in Details can… Cms Made Simple No fix yet Fix from $1,9502018-03-13 HIGH 8.8 CVE-2018-1000093 CryptoNote version version 0.8.9 and possibly later contain a local RPC server which does not require authentication, as a result the walletd and the… Cryptonote after 0.8.9 Fix from $1,9502018-03-13 HIGH 8.8 CVE-2018-1000082 Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the serv… Ajenti No fix yet Fix from $1,9502018-03-13 HIGH 8.0 CVE-2016-0272 Cross-site request forgery (CSRF) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x be… Financial Transaction Manager after 3.0.0.12 Fix from $1,9502018-03-09 HIGH 8.8 CVE-2018-1442 IBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.4) is vulnerable to cross-site request forgery which coul… Monitoring Mitigation only Fix from $1,9502018-03-08 HIGH 8.8 CVE-2017-7641 QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections. Media Streaming Add On after 430.1.2.0 Fix from $1,9502018-03-08 HIGH 8.8 CVE-2018-0210 A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct… Data Center Network Manager Mitigation only Fix from $1,9502018-03-08 MEDIUM 6.3 CVE-2018-0215 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cond… Identity Services Engine Mitigation only Fix from $1,6002018-03-08