Browse CVEs

MEDIUM 6.8 CVE-2011-3293 Multiple cross-site request forgery (CSRF) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remote attack… Secure Access Control Server Mitigation only Fix from $1,6002012-05-02 MEDIUM 6.8 CVE-2012-2397 Cross-site request forgery (CSRF) vulnerability in ownCloud before 3.0.3 allows remote attackers to hijack the authentication of arbitrary users for … Owncloud after 3.0.2 Fix from $1,6002012-04-20 MEDIUM 6.8 CVE-2012-1985 Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hi… Helix Server Mitigation only Fix from $1,6002012-04-17 MEDIUM 6.8 CVE-2011-3846 Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 6.2.2.7 allows remote attackers to hijack the authentication o… System Management Homepage Mitigation only Fix from $1,6002012-04-12 MEDIUM 6.8 CVE-2012-1237 Cross-site request forgery (CSRF) vulnerability in SENCHA SNS before 1.0.2 allows remote attackers to hijack the authentication of arbitrary users. Sencha Sns after 1.0.1 Fix from $1,6002012-04-06 MEDIUM 6.8 CVE-2007-6752 Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users fo… Drupal after 7.12 Fix from $1,6002012-03-28 MEDIUM 6.0 CVE-2012-1843 Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100)… Scalar I500 Firmware Mitigation only Fix from $1,6002012-03-22 MEDIUM 6.8 CVE-2012-1236 Multiple cross-site request forgery (CSRF) vulnerabilities in Janetter before 3.3.0.0 (aka 3.3.0) allow remote attackers to hijack the authentication… Janetter after 3.2.1.1 Fix from $1,6002012-03-19 MEDIUM 6.8 CVE-2012-1498 Multiple cross-site request forgery (CSRF) vulnerabilities in Webfolio CMS 1.1.4 and earlier allow remote attackers to hijack the authentication of a… Webfoliocms1.0.2 No fix yet Fix from $1,6002012-03-19 MEDIUM 6.8 CVE-2012-1297 Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlier allow remote attackers to hi… Contao Cms after 2.11.0 Fix from $1,6002012-03-19 MEDIUM 6.8 CVE-2012-1514 Cross-site request forgery (CSRF) vulnerability in VMware vShield Manager (vSM) 1.0.1 before Update 2 and 4.1.0 before Update 2 allows remote attacke… Vshield Manager after 4.1 Fix from $1,6002012-03-16 MEDIUM 6.8 CVE-2011-1397 Cross-site request forgery (CSRF) vulnerability in the Labor Reporting page in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, … Maximo Asset Management Mitigation only Fix from $1,6002012-03-13 MEDIUM 6.8 CVE-2012-0317 Multiple cross-site request forgery (CSRF) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allow remote attackers… Movable Type after 4.37 Fix from $1,6002012-03-03 MEDIUM 5.1 CVE-2012-0453 Cross-site request forgery (CSRF) vulnerability in xmlrpc.cgi in Bugzilla 4.0.2 through 4.0.4 and 4.1.1 through 4.2rc2, when mod_perl is used, allows… Bugzilla Patch available Fix from $1,6002012-02-25 MEDIUM 6.8 CVE-2012-0997 Cross-site request forgery (CSRF) vulnerability in admin/index.php in 11in1 1.2.1 stable 12-31-2011 allows remote attackers to hijack the authenticat… 11in1 No fix yet Fix from $1,6002012-02-24 MEDIUM 6.0 CVE-2012-0235 Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to hijack the authentication of un… Advantech Webaccess after 6.0 Fix from $1,6002012-02-21 MEDIUM 6.0 CVE-2012-1235 Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to hijack the authentication of… Advantech Webaccess after 6.0 Fix from $1,6002012-02-21 MEDIUM 6.8 CVE-2012-1220 Cross-site request forgery (CSRF) vulnerability in modules/config/admin_utente.php in GAzie 5.20 and earlier allows remote attackers to hijack the au… Gazie after 5.20 Fix from $1,6002012-02-21 MEDIUM 6.8 CVE-2012-1227 Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins fo… Pluck No fix yet Fix from $1,6002012-02-21 MEDIUM 6.8 CVE-2012-1216 Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hijack the authentication of admin… Pbboard No fix yet Fix from $1,6002012-02-21 MEDIUM 6.8 CVE-2010-5085 Multiple cross-site request forgery (CSRF) vulnerabilities in admin/update_user in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attacke… Amethyst No fix yet Fix from $1,6002012-02-14 MEDIUM 6.0 CVE-2010-5084 The cross-site request forgery (CSRF) protection mechanism in e107 before 0.7.23 uses a predictable random token based on the creation date of the ad… E107 after 0.7.22 Fix from $1,6002012-02-14 MEDIUM 6.8 CVE-2012-1083 Cross-site request forgery (CSRF) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TYPO3 allows remote attackers to… Terminal after 0.3.2 Fix from $1,6002012-02-14 MEDIUM 6.0 CVE-2012-0829 Multiple cross-site request forgery (CSRF) vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication o… Mibew Messenger after 1.6.4 Fix from $1,6002012-02-14 MEDIUM 6.0 CVE-2012-1057 Cross-site request forgery (CSRF) vulnerability in the clickthrough tracking functionality in the Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x … Forward Patch available Fix from $1,6002012-02-14 MEDIUM 6.0 CVE-2012-1058 Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for requests that … Flyspray No fix yet Fix from $1,6002012-02-14 MEDIUM 6.8 CVE-2012-0314 Multiple cross-site request forgery (CSRF) vulnerabilities on the eAccess Pocket WiFi (aka GP02) router before 2.00 with firmware 11.203.11.05.168 an… Pocket Wifi Firmware after 11.203.11.05.168 Fix from $1,6002012-02-03 MEDIUM 5.1 CVE-2012-0440 Cross-site request forgery (CSRF) vulnerability in jsonrpc.cgi in Bugzilla 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and … Bugzilla Patch available Fix from $1,6002012-02-02 MEDIUM 6.8 CVE-2011-5074 Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to hijack the au… Support Incident Tracker after 3.64 Fix from $1,6002012-01-29 MEDIUM 6.8 CVE-2011-5068 Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers to hijack the authentic… Support Incident Tracker Mitigation only Fix from $1,6002012-01-29