Browse CVEs

MEDIUM 6.8 CVE-2010-4024 Cross-site request forgery (CSRF) vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to hijack the authenticatio… Insight Control Power Management after 6.1.2 Fix from $1,6002010-10-28 MEDIUM 6.8 CVE-2010-3989 Cross-site request forgery (CSRF) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the aut… Insight Control Virtual Machine Management after 6.1.2 Fix from $1,6002010-10-28 MEDIUM 6.8 CVE-2010-3288 Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to hijack the authentication o… Systems Insight Manager after 6.1 Fix from $1,6002010-10-23 MEDIUM 6.8 CVE-2010-3883 Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote attackers t… Cms Made Simple after 1.7.1 Fix from $1,6002010-10-08 MEDIUM 6.8 CVE-2010-3884 Cross-site request forgery (CSRF) vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack the authentication of administ… Cms Made Simple after 1.8.1 Fix from $1,6002010-10-08 MEDIUM 6.8 CVE-2010-3603 Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.3.4.3 and 2.3.5.1 allows remo… Mojoportal Patch available Fix from $1,6002010-09-24 MEDIUM 6.8 CVE-2010-1767 Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome b… Chrome after 4.1.249.1058 Fix from $1,6002010-09-24 MEDIUM 6.8 CVE-2010-3464 Cross-site request forgery (CSRF) vulnerability in admin/manager_users.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to h… Santafox No fix yet Fix from $1,6002010-09-17 MEDIUM 6.8 CVE-2010-0153 Multiple cross-site request forgery (CSRF) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System … Proventia Network Mail Security System Virtual Appliance Mitigation only Fix from $1,6002010-09-14 MEDIUM 6.8 CVE-2010-3213EPSS 8% Cross-site request forgery (CSRF) vulnerability in Microsoft Outlook Web Access (owa/ev.owa) 2007 through SP2 allows remote attackers to hijack the a… Outlook Web Access No fix yet Fix from $1,6002010-09-07 MEDIUM 6.8 CVE-2009-4898 Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.2 allows remote attackers to hijack the authentication of arbitrary users for req… Twiki after 4.3.1 Fix from $1,6002010-09-07 MEDIUM 6.8 CVE-2009-4981 Multiple cross-site request forgery (CSRF) vulnerabilities in Photokorn Gallery 1.81 allow remote attackers to hijack the authentication of administr… Photokorn Gallery after 1.81 Fix from $1,6002010-08-25 MEDIUM 6.8 CVE-2010-2234 Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of admini… Couchdb Mitigation only Fix from $1,6002010-08-19 MEDIUM 6.8 CVE-2010-3030 Cross-site request forgery (CSRF) vulnerability in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote attackers to hijack the authenti… Open Blog Mitigation only Fix from $1,6002010-08-17 MEDIUM 6.8 CVE-2010-3024 Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in DiamondList 0.1.6, and possibly earlier, allow remote attacker… Diamondlist No fix yet Fix from $1,6002010-08-16 MEDIUM 6.8 CVE-2010-1971 Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authent… Insight Software Installer after 6.0 Fix from $1,6002010-07-15 MEDIUM 6.8 CVE-2010-1968 Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authent… Insight Software Installer after 6.0 Fix from $1,6002010-07-15 MEDIUM 6.8 CVE-2010-1668 Multiple cross-site request forgery (CSRF) vulnerabilities in Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 allow remote attackers… Mahara after 1.0.14 Fix from $1,6002010-07-06 MEDIUM 6.8 CVE-2010-2594 Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Sol… Snare Agent after 3.2.3 Fix from $1,6002010-07-02 MEDIUM 6.8 CVE-2010-2231 Cross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.13 and 1.9.x before 1.9.9 allow… Moodle after 1.8.12 Fix from $1,6002010-06-28 MEDIUM 6.8 CVE-2009-4905 Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of … Acc Statistics No fix yet Fix from $1,6002010-06-25 MEDIUM 6.8 CVE-2009-4906 Cross-site request forgery (CSRF) vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrat… Acc Php Email No fix yet Fix from $1,6002010-06-25 MEDIUM 6.8 CVE-2009-4907 Multiple cross-site request forgery (CSRF) vulnerabilities in oBlog allow remote attackers to hijack the authentication of administrators for request… Oblog No fix yet Fix from $1,6002010-06-25 MEDIUM 6.8 CVE-2010-2345 Cross-site request forgery (CSRF) vulnerability in odCMS 1.06, and possibly earlier, allows remote attackers to hijack the authentication of administ… Odcms Mitigation only Fix from $1,6002010-06-21 MEDIUM 6.0 CVE-2010-0540 Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.… Mac Os X Patch available Fix from $1,6002010-06-17 MEDIUM 6.8 CVE-2010-2268 Cross-site request forgery (CSRF) vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to hijack th… Rock Web Server No fix yet Fix from $1,6002010-06-15 MEDIUM 5.1 CVE-2010-2282 Cross-site request forgery (CSRF) vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication of administrators for request… Tomatocms Mitigation only Fix from $1,6002010-06-15 MEDIUM 6.8 CVE-2010-2294 Cross-site request forgery (CSRF) vulnerability in Plume CMS 1.2.4 and possibly earlier allows remote attackers to hijack the authentication of admin… Plume Cms after 1.2.4 Fix from $1,6002010-06-15 MEDIUM 6.8 CVE-2010-1648 Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote atta… Mediawiki Patch available Fix from $1,6002010-06-08 MEDIUM 6.8 CVE-2010-2025 Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with fi… Scientific Atlanta Webstar Dpc2100r2 No fix yet Fix from $1,6002010-05-26