Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11,121

Export CSV
CVE-2022-4845

Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Usememos
Products
Memos
CVE-2022-4846

Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Usememos
Products
Memos
CVE-2022-4850

Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Usememos
Products
Memos
CVE-2022-42435

IBM Business Automation Workflow cross-site request forgery

IBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, and 22.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 238054.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Ibm
Products
Business Automation Workflow
CVE-2022-4102

Royal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post Deletion

The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorization and CSRF checks when deleting a template and does not ensure that the post to be deleted is a template. This could allow any authenticated users, such as subscribers, to delete arbitrary posts assuming they know the related slug.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Royal-elementor-addons
Products
Royal Elementor Addons
CVE-2022-4646

Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Ikus-soft
Products
Rdiffweb
CVE-2024-53472

WeGIA v3.2.0 was discovered to contain a Cross-Site Request Forgery (CSRF).

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Wegia
Products
Wegia
CVE-2024-35550

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=rev.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms
CVE-2024-35552

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=del&dataType=logo&dataTypeCN.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms
CVE-2024-35553

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=add&nohrefStr=close.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms
CVE-2024-35554

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=del&dataType=newsWeb&dataTypeCN.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35555

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mudi=switch&dataType=newsWeb&fieldName=state&fieldName2=state&tabName=infoWeb&dataID=40.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35556

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsSys_deal.php?mudi=infoSet.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms
CVE-2024-35557

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApi_deal.php?mudi=rev&nohrefStr=close.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35558

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=rev&nohrefStr=close.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35559

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=rev&nohrefStr=close.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35560

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=del&dataType=&dataTypeCN.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35561

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=add&nohrefStr=close.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2022-4849

Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Usememos
Products
Memos