Export limit exceeded: 11121 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11,121

Export CSV
CVE-2022-4845

Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Usememos
Products
Memos
CVE-2022-4846

Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Usememos
Products
Memos
CVE-2022-4850

Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Usememos
Products
Memos
CVE-2022-42435

IBM Business Automation Workflow cross-site request forgery

IBM Business Automation Workflow 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, and 22.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 238054.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Ibm
Products
Business Automation Workflow
CVE-2022-4102

Royal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post Deletion

The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorization and CSRF checks when deleting a template and does not ensure that the post to be deleted is a template. This could allow any authenticated users, such as subscribers, to delete arbitrary posts assuming they know the related slug.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Royal-elementor-addons
Products
Royal Elementor Addons
CVE-2022-4646

Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Ikus-soft
Products
Rdiffweb
CVE-2024-53472

WeGIA v3.2.0 was discovered to contain a Cross-Site Request Forgery (CSRF).

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Wegia
Products
Wegia
CVE-2024-35550

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=rev.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms
CVE-2024-35552

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=del&dataType=logo&dataTypeCN.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms
CVE-2024-35553

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=add&nohrefStr=close.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms
CVE-2024-35554

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=del&dataType=newsWeb&dataTypeCN.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35555

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mudi=switch&dataType=newsWeb&fieldName=state&fieldName2=state&tabName=infoWeb&dataID=40.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35556

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsSys_deal.php?mudi=infoSet.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms
CVE-2024-35557

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApi_deal.php?mudi=rev&nohrefStr=close.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35558

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=rev&nohrefStr=close.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35559

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=rev&nohrefStr=close.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35560

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=del&dataType=&dataTypeCN.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35561

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=add&nohrefStr=close.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2022-4849

Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Usememos
Products
Memos