Browse CVEs

MEDIUM 6.8 CVE-2015-6262 Cross-site request forgery (CSRF) vulnerability in Cisco Prime Infrastructure 1.2(0.103) and 2.0(0.0) allows remote attackers to hijack the authentic… Prime Infrastructure Mitigation only Fix from $1,6002015-08-25 MEDIUM 6.8 CVE-2015-6660 The Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form token, which allows remote attackers to conduct CSRF a… Drupal Patch available Fix from $1,6002015-08-24 MEDIUM 6.8 CVE-2015-2905 Cross-site request forgery (CSRF) vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the a… Ncs01 Firmware after 1.0.12 Fix from $1,6002015-08-23 MEDIUM 6.8 CVE-2015-2983 Cross-site request forgery (CSRF) vulnerability in admin.php in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlie… Photo Gallery Cms Free Mitigation only Fix from $1,6002015-08-22 MEDIUM 6.8 CVE-2015-4530 Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01, Documentum Administrator through 7.2, Documentum Digital Asse… Documentum Administrator after 7.2 Fix from $1,6002015-08-20 MEDIUM 6.8 CVE-2015-0542 Multiple cross-site request forgery (CSRF) vulnerabilities in EMC RSA Archer GRC 5.5 SP1 before P3 allow remote attackers to hijack the authenticatio… Rsa Archer Egrc Mitigation only Fix from $1,6002015-08-20 MEDIUM 6.8 CVE-2015-6523 Cross-site request forgery (CSRF) vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authenticatio… Portfolio after 1.0 Fix from $1,6002015-08-19 MEDIUM 6.8 CVE-2015-6517 Cross-site request forgery (CSRF) vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authentication of users for requests that d… Phpliteadmin No fix yet Fix from $1,6002015-08-18 MEDIUM 5.1 CVE-2015-5508 Cross-site request forgery (CSRF) vulnerability in the XC NCIP Provider module in the eXtensible Catalog (XC) Drupal Toolkit allows remote attackers … The Extensible Catalog Drupal Toolkit Mitigation only Fix from $1,6002015-08-18 MEDIUM 6.8 CVE-2015-2848 Cross-site request forgery (CSRF) vulnerability in Honeywell Tuxedo Touch before 5.2.19.0_VA allows remote attackers to hijack the authentication of … Tuxedo Touch after 5.1.13.0_va Fix from $1,6002015-07-26 MEDIUM 6.8 CVE-2015-4281 Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.5 MR1 allows remote attackers to hijack the authentication of arbitr… Webex Meetings Server Mitigation only Fix from $1,6002015-07-22 MEDIUM 6.0 CVE-2015-2134 Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.5.0 allows remote authenticated users to hijack the a… System Management Homepage after 7.4.0 Fix from $1,6002015-07-21 MEDIUM 6.8 CVE-2015-4460 Cross-site request forgery (CSRF) vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A.S C2Box before 4.0.0 (r19171) allows remot… C2box after 4.0.0 Fix from $1,6002015-07-16 MEDIUM 6.8 CVE-2015-4274 Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified Intelligence Center 10.0(1) and 10.6(1) allows remote attackers… Unified Intelligence Center Mitigation only Fix from $1,6002015-07-16 MEDIUM 6.8 CVE-2015-5530 Multiple cross-site request forgery (CSRF) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to hijack the authentication o… Articlefr No fix yet Fix from $1,6002015-07-16 MEDIUM 6.8 CVE-2015-4267 Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(0.793), 1.3(0.876), 1.4(0.109), 2.0(… Identity Services Engine Software Mitigation only Fix from $1,6002015-07-15 MEDIUM 6.8 CVE-2015-5397 Cross-site request forgery (CSRF) vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.2 allows remote attackers to hijack the authentic… Joomla\! Mitigation only Fix from $1,6002015-07-14 MEDIUM 6.8 CVE-2015-4254 Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence Advanced Media Gateway devices with software 1.1(1.40) allows remote attackers … Telepresence Advanced Media Gateway Mitigation only Fix from $1,6002015-07-10 MEDIUM 6.8 CVE-2015-4258 Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence MSE 8000 devices allows remote attackers to hijack the authentication of arbitr… Telepresence Mse 8000 Series Mitigation only Fix from $1,6002015-07-10 MEDIUM 6.8 CVE-2015-4257 Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence MCU 4500 devices with software 4.5(1.55) allows remote attackers to hijack the … Telepresence Mcu Software Mitigation only Fix from $1,6002015-07-10 MEDIUM 6.8 CVE-2015-4255 Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence IP Gateway devices with software 2.0(3.34) allows remote attackers to hijack th… Telepresence Ip Gateway Mitigation only Fix from $1,6002015-07-10 MEDIUM 6.8 CVE-2015-4256 Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence IP VCR devices with software 3.0(1.27) allows remote attackers to hijack the au… Telepresence Ip Vcr 3.0 Mitigation only Fix from $1,6002015-07-10 MEDIUM 6.8 CVE-2015-4253 Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence Serial Gateway devices with software 1.0(1.42) allows remote attackers to hijac… Telepresence Serial Gateway Mitigation only Fix from $1,6002015-07-10 MEDIUM 6.8 CVE-2015-4252 Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence ISDN Gateway devices with software 2.2(1.106) allows remote attackers to hijack… Telepresence Isdn Gw 3241 Mitigation only Fix from $1,6002015-07-10 MEDIUM 6.8 CVE-2015-4242 Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote att… Firesight System Software Mitigation only Fix from $1,6002015-07-08 MEDIUM 6.0 CVE-2015-0115 Cross-site request forgery (CSRF) vulnerability in IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 t… Leads Patch available Fix from $1,6002015-06-28 MEDIUM 6.8 CVE-2015-1485 Cross-site request forgery (CSRF) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.… Data Loss Prevention after 12.5.1 Fix from $1,6002015-06-28 MEDIUM 6.8 CVE-2014-6198 Cross-site request forgery (CSRF) vulnerability in IBM Security Network Protection 5.3 before 5.3.1 allows remote attackers to hijack the authenticat… Security Network Protection Firmware Patch available Fix from $1,6002015-06-28 MEDIUM 6.8 CVE-2015-4586 Cross-site request forgery (CSRF) vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote attackers … Cellpipe 7130 Rg 5ae.m2013 Hol Firmware No fix yet Fix from $1,6002015-06-23 MEDIUM 6.8 CVE-2015-4189 Cross-site request forgery (CSRF) vulnerability in Cisco Data Center Analytics Framework (DCAF) 1.4 allows remote attackers to hijack the authenticat… Data Center Analytics Framework Mitigation only Fix from $1,6002015-06-23