Export limit exceeded: 210465 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 210465 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (4493 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-2228 | 1 Modoboa | 1 Modoboa | 2025-02-04 | 6.8 Medium |
| Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0. | ||||
| CVE-2023-38739 | 1 Ibm | 1 Sterling B2b Integrator | 2025-01-31 | 4.3 Medium |
| IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. | ||||
| CVE-2020-22334 | 1 Beescms | 1 Beescms | 2025-01-29 | 6.5 Medium |
| Cross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the administrator account via crafted request to /admin/admin_admin.php. | ||||
| CVE-2020-18131 | 1 Clanscripts Project | 1 Clanscripts | 2025-01-29 | 8.8 High |
| Cross Site Request Forgery (CSRF) vulnerability in Bluethrust Clan Scripts v4 allows attackers to escilate privledges to an arbitrary account via a crafted request to /members/console.php?cID=5. | ||||
| CVE-2020-36065 | 1 Flycms Project | 1 Flycms | 2025-01-29 | 8.8 High |
| Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save. | ||||
| CVE-2020-23363 | 1 Verydows | 1 Verydows | 2025-01-29 | 8.8 High |
| Cross Site Request Forgery (CSRF) vulnerability found in Verytops Verydows all versions that allows an attacker to execute arbitrary code via a crafted script. | ||||
| CVE-2021-21731 | 1 Zte | 1 Zxcloud Irai | 2025-01-28 | 8.1 High |
| A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects: ZXCLOUD iRAI All versions up to KVM-ProductV6.03.04 | ||||
| CVE-2022-35730 | 1 Oceanwp | 1 Sticky Header | 2025-01-27 | 4.3 Medium |
| Cross-Site Request Forgery (CSRF) vulnerability in Oceanwp sticky header plugin <= 1.0.8 on WordPress. | ||||
| CVE-2020-35239 | 1 Cakephp | 1 Cakephp | 2025-01-15 | 8.8 High |
| A vulnerability exists in CakePHP versions 4.0.x through 4.1.3. The CsrfProtectionMiddleware component allows method override parameters to bypass CSRF checks by changing the HTTP request method to an arbitrary string that is not in the list of request methods that CakePHP checks. Additionally, the route middleware does not verify that this overriden method (which can be an arbitrary string) is actually an HTTP method. | ||||
| CVE-2020-9210 | 1 Huawei | 2 Myna, Myna Firmware | 2025-01-13 | 6.8 Medium |
| There is an insufficient integrity vulnerability in Huawei products. A module does not perform sufficient integrity check in a specific scenario. Attackers can exploit the vulnerability by physically install malware. This could compromise normal service of the affected device. (Vulnerability ID: HWPSIRT-2020-00145) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9210. | ||||
| CVE-2019-13521 | 1 Rockwellautomation | 1 Arena | 2024-12-17 | 7.8 High |
| A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena Simulation Software to address the reported vulnerabilities. | ||||
| CVE-2020-20726 | 1 Gilacms | 1 Gila Cms | 2024-12-11 | 8.8 High |
| Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the cm/update_rows/user parameter. | ||||
| CVE-2020-20502 | 1 Yzmcms | 1 Yzmcms | 2024-12-10 | 6.5 Medium |
| Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check function. | ||||
| CVE-2020-21252 | 1 Hongcms Project | 1 Hongcms | 2024-12-10 | 8.8 High |
| Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter. | ||||
| CVE-2020-21366 | 1 Njtech | 1 Greencms | 2024-12-10 | 8 High |
| Cross Site Request Forgery vulnerability in GreenCMS v.2.3 allows an attacker to gain privileges via the adduser function of index.php. | ||||
| CVE-2020-18409 | 1 Catfishcms Project | 1 Catfishcms | 2024-12-05 | 6.8 Medium |
| Cross Site Request Forgery (CSRF) vulnerability was discovered in CatfishCMS 4.8.63 that would allow attackers to obtain administrator permissions via /index.php/admin/index/modifymanage.html. | ||||
| CVE-2020-18416 | 1 Jyuu | 1 Jymusic | 2024-12-04 | 6.8 Medium |
| An cross site request forgery (CSRF) vulnerability discovered in Jymusic v2.0.0.,that allows attackers to execute arbitrary code via /admin.php?s=/addons/config.html&id=6 to modify payment information. | ||||
| CVE-2020-18418 | 1 Feifeicms | 1 Feifeicms | 2024-12-04 | 8.8 High |
| A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator accounts via /index.php?s=Admin-Admin-Insert. | ||||
| CVE-2023-5900 | 1 Sfu | 1 Pkp Web Application Library | 2024-12-03 | 3.5 Low |
| Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16. | ||||
| CVE-2018-0107 | 1 Cisco | 1 Prime Service Catalog | 2024-12-02 | N/A |
| A vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a lack of cross-site request forgery (CSRF) protection. An attacker could exploit this vulnerability by tricking the user of a web application into executing an adverse action. Cisco Bug IDs: CSCvg30313. | ||||