Browse CVEs

HIGH 8.8 CVE-2023-50722 XWiki Platform is a generic wiki platform. Starting in 2.3 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, there is a reflected XSS or also di… Xwiki 14.10.5 / 15.5.2+ Fix from $1,9502023-12-15 HIGH 8.8 CVE-2023-49749 Cross-Site Request Forgery (CSRF) vulnerability in SureTriggers SureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything!.This issu… Suretriggers after 1.0.23 Fix from $1,9502023-12-15 HIGH 8.8 CVE-2023-49197 Cross-Site Request Forgery (CSRF) vulnerability in Apasionados, Apasionados del Marketing, NetConsulting DoFollow Case by Case.This issue affects DoF… Dofollow Case By Case after 3.4.2 Fix from $1,9502023-12-15 HIGH 8.8 CVE-2023-49744 Cross-Site Request Forgery (CSRF) vulnerability in Gift Up Gift Up Gift Cards for WordPress and WooCommerce.This issue affects Gift Up Gift Cards for… Gift Up Gift Cards For Wordpress And Woocommerce after 2.21.3 Fix from $1,9502023-12-15 HIGH 8.8 CVE-2023-50870 In JetBrains TeamCity before 2023.11.1 a CSRF on login was possible Teamcity 2023.11.1+ Fix from $1,9502023-12-15 HIGH 8.8 CVE-2023-50017 Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/database/backup Dreamer Cms No fix yet Fix from $1,9502023-12-14 HIGH 8.1 CVE-2023-50774 A cross-site request forgery (CSRF) vulnerability in Jenkins HTMLResource Plugin 1.02 and earlier allows attackers to delete arbitrary files on the J… Html Resource Mitigation only Fix from $1,9502023-12-13 HIGH 8.8 CVE-2023-50778 A cross-site request forgery (CSRF) vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allows attackers to connect to an attacker-sp… Paaslane Estimate after 1.0.4 Fix from $1,9502023-12-13 HIGH 8.8 CVE-2023-50766 A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attackers to send an HTTP request to … Nexus Platform after 3.18.0-03 Fix from $1,9502023-12-13 HIGH 8.8 CVE-2023-50768 A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attackers to connect to an attacker-s… Nexus Platform after 3.18.0-03 Fix from $1,9502023-12-13 HIGH 8.8 CVE-2023-47322 The "userModify" feature of Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to privilege escalation. If an administr… Silverpeas 6.3.2+ Fix from $1,9502023-12-13 HIGH 8.8 CVE-2023-47326 Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) via the Domain SQL Create function. Silverpeas 6.3.2+ Fix from $1,9502023-12-13 HIGH 8.8 CVE-2022-27488 A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4… Fortiai after 7.0.4 Fix from $1,9502023-12-13 HIGH 8.8 CVE-2023-47578 Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery (CSRF) attacks due to the absence of CSRF protectio… Rely Pcie Firmware Mitigation only Fix from $1,9502023-12-13 HIGH 8.8 CVE-2023-45316 Mattermost fails to validate if a relative path is passed in /plugins/playbooks/api/v0/telemetry/run/<telem_run_id> as a telemetry run ID, allowing a… Mattermost Server after 9.2.1 Fix from $1,9502023-12-12 HIGH 8.8 CVE-2023-6671 A vulnerability has been discovered on OJS, that consists in a CSRF (Cross-Site Request Forgery) attack that forces an end user to execute unwanted a… Open Journal Systems Patch available Fix from $1,9502023-12-11 HIGH 8.8 CVE-2023-5756 The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.6. This … Digital Publications By Supsystic after 1.7.6 Fix from $1,9502023-12-09 HIGH 8.8 CVE-2023-49377 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/update. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49378 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/form/save. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49379 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /admin/friend_link/save. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49380 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/delete. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49381 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/update. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49382 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/delete. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49383 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/save. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49395 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/update. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49396 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/save. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49397 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49398 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/delete. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49446 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/save. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49447 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/update. Jfinalcms No fix yet Fix from $1,9502023-12-05