Browse CVEs

MEDIUM 6.8 CVE-2012-6433 Cross-site request forgery (CSRF) vulnerability in e107_admin/newspost.php in e107 1.0.1 allows remote attackers to hijack the authentication of admi… E107 Patch available Fix from $1,6002013-01-03 MEDIUM 6.8 CVE-2012-6434 Multiple cross-site request forgery (CSRF) vulnerabilities in e107_admin/download.php in e107 1.0.2 allow remote attackers to hijack the authenticati… E107 Patch available Fix from $1,6002013-01-03 MEDIUM 6.8 CVE-2012-5992 Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attack… Wireless Lan Controller Software No fix yet Fix from $1,6002012-12-19 MEDIUM 6.8 CVE-2012-5178 Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the authentication… Welcart Plugin after 1.2.1 Fix from $1,6002012-12-19 MEDIUM 6.8 CVE-2012-5622 Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift … Openshift Patch available Fix from $1,6002012-12-18 MEDIUM 6.8 CVE-2012-4608 Cross-site request forgery (CSRF) vulnerability in the web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to hijack … Rsa Netwitness Informer after 2.0.5.5 Fix from $1,6002012-12-05 MEDIUM 6.8 CVE-2012-5542 Cross-site request forgery (CSRF) vulnerability in the Commerce Extra Panes module 7.x-1.x before 7.x-1.1 in Drupal allows remote attackers to hijack… Commerce Extra Panes Patch available Fix from $1,6002012-12-03 MEDIUM 6.8 CVE-2012-5547 Multiple cross-site request forgery (CSRF) vulnerabilities in the Search API module 7.x-1.x before 7.x-1.3 for Drupal allow remote attackers to hijac… Search Api Patch available Fix from $1,6002012-12-03 MEDIUM 6.8 CVE-2012-5549 Cross-site request forgery (CSRF) vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers to hijack the authentication … Time Spent Mitigation only Fix from $1,6002012-12-03 MEDIUM 6.8 CVE-2012-5556 Multiple cross-site request forgery (CSRF) vulnerabilities in the RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.1 and 7.x-2.x before 7.x-… Restful Web Services Patch available Fix from $1,6002012-12-03 MEDIUM 6.8 CVE-2012-5450 Cross-site request forgery (CSRF) vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) 1.11.2 and earlier allows remot… Cms Made Simple after 1.11.2 Fix from $1,6002012-12-03 MEDIUM 6.8 CVE-2012-4478 Cross-site request forgery (CSRF) vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to hijack the authentication… Drag \& Drop Gallery Patch available Fix from $1,6002012-11-30 MEDIUM 6.8 CVE-2012-6047 Cross-site request forgery (CSRF) vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators… X7 Chat after 2.0.5.1 Fix from $1,6002012-11-27 MEDIUM 6.8 CVE-2010-5283 Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers to hijack the authentication of… Livelink Ecm No fix yet Fix from $1,6002012-11-26 MEDIUM 6.8 CVE-2010-5285 Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of administrato… Collabtive No fix yet Fix from $1,6002012-11-26 MEDIUM 6.0 CVE-2011-2908 Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.… Jboss Enterprise Brms Platform after 5.2.1 Fix from $1,6002012-11-23 MEDIUM 6.8 CVE-2012-4205 Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 assign the system principal, rather than the sandbox principal, to XM… Firefox 2.14 / 17.0+ Fix from $1,6002012-11-21 MEDIUM 6.8 CVE-2012-4943 Multiple cross-site request forgery (CSRF) vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to hij… Fleetcommander after 4.0 Fix from $1,6002012-11-18 MEDIUM 6.8 CVE-2012-4935 Cross-site request forgery (CSRF) vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack the authentication of a… Pattern Insight Mitigation only Fix from $1,6002012-11-18 MEDIUM 6.8 CVE-2012-5898 Cross-site request forgery (CSRF) vulnerability in SAMEDIA LandShop 0.9.2 allows remote attackers to hijack the authentication of administrators for … Landshop No fix yet Fix from $1,6002012-11-17 MEDIUM 6.8 CVE-2012-5891 Multiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow remote attackers to hijack th… Dalbum after 1.44 Fix from $1,6002012-11-17 MEDIUM 6.8 CVE-2012-4853 Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Application Server 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and… Websphere Application Server Mitigation only Fix from $1,6002012-11-14 MEDIUM 6.8 CVE-2012-4732 Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before … Rt Patch available Fix from $1,6002012-11-11 MEDIUM 6.8 CVE-2012-4486 Cross-site request forgery (CSRF) vulnerability in the Subuser module before 6.x-1.8 for Drupal allows remote attackers to hijack the authentication … Subuser after 6.x-1.7 Fix from $1,6002012-11-02 MEDIUM 6.8 CVE-2011-5226 Cross-site request forgery (CSRF) vulnerability in wordpress_sentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijac… Sentinel Mitigation only Fix from $1,6002012-10-25 MEDIUM 6.8 CVE-2012-5387 Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers … White Label Cms after 1.5 Fix from $1,6002012-10-24 MEDIUM 6.8 CVE-2012-4773 Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of adminis… Subrion Cms after 2.2.2 Fix from $1,6002012-10-22 MEDIUM 6.8 CVE-2012-1900 Cross-site request forgery (CSRF) vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers to hijack the authentication… Razorcms after 1.2.1 Fix from $1,6002012-10-22 MEDIUM 6.8 CVE-2012-4002 Cross-site request forgery (CSRF) vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecifie… Glpi after 0.83.2 Fix from $1,6002012-10-09 MEDIUM 6.8 CVE-2012-5326 Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication o… Isupport No fix yet Fix from $1,6002012-10-08