Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (9532 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2012-0699 1 Haudenschilt 1 Family Connections Cms 2024-11-21 N/A
Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (1) add news via an add action to familynews.php or (2) add a prayer via an add action to prayers.php.
CVE-2011-5328 1 User Access Manager Project 1 User Access Manager 2024-11-21 N/A
The user-access-manager plugin before 1.2 for WordPress has CSRF.
CVE-2011-5250 1 Prophecyinternational 1 Snare 2024-11-21 6.5 Medium
Snare for Linux before 1.7.0 has CSRF in the web interface.
CVE-2011-4952 1 Cobblerd 1 Cobbler 2024-11-21 8.8 High
cobbler: Web interface lacks CSRF protection when using Django framework
CVE-2011-3612 1 Usebb 1 Usebb 2024-11-21 8.8 High
Cross-Site Request Forgery (CSRF) vulnerability exists in panel.php in UseBB before 1.0.12.
CVE-2011-3609 1 Redhat 1 Jboss Application Server 2024-11-21 6.5 Medium
A CSRF issue was found in JBoss Application Server 7 before 7.1.0. JBoss did not properly restrict access to the management console information (for example via the "Access-Control-Allow-Origin" HTTP access control flag). This can lead to unauthorized information leak if a user with admin privileges visits a specially-crafted web page provided by a remote attacker.
CVE-2011-3582 1 Anelectron 1 Advanced Electron Forums 2024-11-21 8.8 High
A Cross-site Request Forgery (CSRF) vulnerability exists in Advanced Electron Forums (AEF) through 1.0.9 due to inadequate confirmation for sensitive transactions in the administrator functions.
CVE-2011-2934 1 Websitebaker 1 Websitebaker 2024-11-21 8.8 High
A Cross Site Request Forgery (CSRF) vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlier due to inadequate confirmation for sensitive transactions.
CVE-2011-1085 1 Smoothwall 1 Smoothwall Express 2024-11-21 8.8 High
CSRF vulnerability in Smoothwall Express 3.
CVE-2011-0525 1 Batavi 1 Batavi 2024-11-21 8.8 High
Batavi before 1.0 has CSRF.
CVE-2010-4241 1 Tiki 1 Tikiwiki Cms\/groupware 2024-11-21 8.8 High
Tiki Wiki CMS Groupware 5.2 has CSRF
CVE-2010-3305 1 Pixelpost 1 Pixelpost 2024-11-21 8.8 High
Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password.
CVE-2023-0737 1 Wallabag 1 Wallabag 2024-11-20 6.5 Medium
wallabag version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to arbitrarily delete user accounts via the /account/delete endpoint. This issue is fixed in version 2.5.4.
CVE-2024-52401 2024-11-20 9.6 Critical
Cross-Site Request Forgery (CSRF) vulnerability in 荒野无灯 Hacklog DownloadManager allows Upload a Web Shell to a Web Server.This issue affects Hacklog DownloadManager: from n/a through 2.1.4.
CVE-2024-52424 1 Sureshkumar 1 Wp-login Customizer 2024-11-20 7.1 High
Cross-Site Request Forgery (CSRF) vulnerability in Suresh Kumar wp-login customizer allows Stored XSS.This issue affects wp-login customizer: from n/a through 1.0.
CVE-2024-52390 2024-11-19 4.9 Medium
: Path Traversal: '.../...//' vulnerability in CYAN Backup allows Path Traversal.This issue affects CYAN Backup: from n/a through 2.5.3.
CVE-2024-51632 2024-11-19 7.1 High
Cross-Site Request Forgery (CSRF) vulnerability in Sam Hoe SH Slideshow allows Stored XSS.This issue affects SH Slideshow: from n/a through 4.3.
CVE-2024-43338 2024-11-19 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Automattic, Inc. Crowdsignal Dashboard – Polls, Surveys & more allows Cross Site Request Forgery.This issue affects Crowdsignal Dashboard – Polls, Surveys & more: from n/a through 3.1.2.
CVE-2024-51637 2024-11-19 7.1 High
Cross-Site Request Forgery (CSRF) vulnerability in Scott E. Royalty Admin SMS Alert allows Stored XSS.This issue affects Admin SMS Alert: from n/a through 1.1.0.
CVE-2024-51648 2024-11-19 7.1 High
Cross-Site Request Forgery (CSRF) vulnerability in Hands, Inc e-shops allows Reflected XSS.This issue affects e-shops: from n/a through 1.0.3.