Browse CVEs

MEDIUM 6.8 CVE-2015-0541 Cross-site request forgery (CSRF) vulnerability in EMC RSA Web Threat Detection before 5.1 allows remote attackers to hijack the authentication of ar… Web Threat Detection after 5.0 Fix from $1,6002015-06-05 MEDIUM 6.8 CVE-2015-0759 Cross-site request forgery (CSRF) vulnerability in Cisco Headend Digital Broadband Delivery System allows remote attackers to hijack the authenticati… Headend Digital Broadband Delivery System Mitigation only Fix from $1,6002015-06-02 MEDIUM 6.8 CVE-2015-0218 Cross-site request forgery (CSRF) vulnerability in auth/shibboleth/logout.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.… Moodle after 2.5.9 Fix from $1,6002015-06-01 MEDIUM 6.8 CVE-2015-0213 Multiple cross-site request forgery (CSRF) vulnerabilities in (1) editcategories.html and (2) editcategories.php in the Glossary module in Moodle thr… Moodle after 2.5.9 Fix from $1,6002015-06-01 MEDIUM 6.8 CVE-2015-3902 Multiple cross-site request forgery (CSRF) vulnerabilities in the setup process in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x be… phpMyAdmin Patch available Fix from $1,6002015-05-26 MEDIUM 6.8 CVE-2014-4774 Cross-site request forgery (CSRF) vulnerability in the login page in IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use A… Endpoint Manager Family Mitigation only Fix from $1,6002015-05-25 MEDIUM 6.8 CVE-2015-1894 Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack the auth… Optim Workload Replay Patch available Fix from $1,6002015-05-25 MEDIUM 6.8 CVE-2012-1978 Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authentication… Simple Php Agenda after 2.2.8 Fix from $1,6002015-05-21 MEDIUM 6.8 CVE-2015-0741 Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and earlier allo… Hosted Collaboration Solution after 10.6 Fix from $1,6002015-05-21 MEDIUM 6.8 CVE-2015-3141 Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies Xeams 4.5 Build 5755 and earlier allow remote attackers to hij… Xeams after 4.5 Fix from $1,6002015-05-20 MEDIUM 6.8 CVE-2012-4902 Multiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and earlier allow remote attackers to hijack the authentication of a… Template Cms after 2.1.1 Fix from $1,6002015-05-20 MEDIUM 6.8 CVE-2012-6691 Multiple cross-site request forgery (CSRF) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to hijack the authenticat… Oscmax after 2.5.0 Fix from $1,6002015-05-20 MEDIUM 6.8 CVE-2015-0740 Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1) allows remote attackers to hijack the authentication of … Unified Intelligence Center Mitigation only Fix from $1,6002015-05-20 MEDIUM 6.8 CVE-2015-0735 Cross-site request forgery (CSRF) vulnerability in Cisco Unified Customer Voice Portal (CVP) 10.5(1) allows remote attackers to hijack the authentica… Unified Customer Voice Portal Mitigation only Fix from $1,6002015-05-17 MEDIUM 6.8 CVE-2015-0736 Cross-site request forgery (CSRF) vulnerability in Cisco MediaSense 10.5(1) and earlier allows remote attackers to hijack the authentication of arbit… Mediasense Mitigation only Fix from $1,6002015-05-16 MEDIUM 6.8 CVE-2015-0716 Cross-site request forgery (CSRF) vulnerability in the CUCReports page in Cisco Unity Connection 11.0(0.98000.225) and 11.0(0.98000.332) allows remot… Unity Connection Mitigation only Fix from $1,6002015-05-07 MEDIUM 6.8 CVE-2015-2248 Cross-site request forgery (CSRF) vulnerability in the user portal in Dell SonicWALL Secure Remote Access (SRA) products with firmware before 7.5.1.0… Remote Access Firmware 7.5.1.0-38sv / 8.0.0.1-16sv+ Fix from $1,6002015-05-01 MEDIUM 6.8 CVE-2014-6090 Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) DataMappingEditorCommands, (2) DatastoreEditorCommands, and (3) IEGEditorComman… Curam Social Program Management Patch available Fix from $1,6002015-04-27 MEDIUM 6.8 CVE-2012-2930 Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to hijack the authentication o… Tinywebgallery after 1.8.6 Fix from $1,6002015-04-24 MEDIUM 5.8 CVE-2011-4403 Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the authentication of administrators f… Zen Cart No fix yet Fix from $1,6002015-04-24 MEDIUM 6.8 CVE-2015-0705 Cross-site request forgery (CSRF) vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.6(1.9) allows… Unified Meetingplace Mitigation only Fix from $1,6002015-04-22 MEDIUM 6.8 CVE-2015-0704 Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow remote attackers to hijack th… Unified Meetingplace Mitigation only Fix from $1,6002015-04-22 MEDIUM 5.8 CVE-2015-3388 Cross-site request forgery (CSRF) vulnerability in the Commerce Balanced Payments module for Drupal allows remote attackers to hijack the authenticat… Commerce Balanced Payments after 7.x-1.2 Fix from $1,6002015-04-21 MEDIUM 5.8 CVE-2015-3382 Multiple cross-site request forgery (CSRF) vulnerabilities in the Node basket module for Drupal allow remote attackers to hijack the authentication o… Node Basket after 7.x-1.0-rc2 Fix from $1,6002015-04-21 MEDIUM 5.8 CVE-2015-3380 Multiple cross-site request forgery (CSRF) vulnerabilities in the Feature Set module for Drupal allow remote attackers to hijack the authentication o… Feature Set after 7.x-1.0-beta1 Fix from $1,6002015-04-21 MEDIUM 5.8 CVE-2015-3375 Cross-site request forgery (CSRF) vulnerability in the Shibboleth Authentication module before 6.x-4.1 and 7.x-4.x before 7.x-4.1 for Drupal allows r… Shibboleth Authentication after 6.x-4.0 Fix from $1,6002015-04-21 MEDIUM 5.8 CVE-2015-3374 Multiple cross-site request forgery (CSRF) vulnerabilities in the Corner module for Drupal allow remote attackers to hijack the authentication of adm… Corner Patch available Fix from $1,6002015-04-21 MEDIUM 6.8 CVE-2015-3370 Cross-site request forgery (CSRF) vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote attackers to hijack the authenticat… Node Invite after 6.x-2.3 Fix from $1,6002015-04-21 MEDIUM 6.8 CVE-2015-3367 Multiple cross-site request forgery (CSRF) vulnerabilities in the Patterns module before 7.x-2.2 for Drupal allow remote attackers to hijack the auth… Patterns after 7.x-2.1 Fix from $1,6002015-04-21 MEDIUM 5.8 CVE-2015-3366 Cross-site request forgery (CSRF) vulnerability in the Alfresco module before 6.x-1.3 for Drupal allows remote attackers to hijack the authentication… Alfresco after 6.x-1.2 Fix from $1,6002015-04-21