Export limit exceeded: 10004 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 10,004

Export CSV
CVE-2022-0154

An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was vulnerable to a Cross-Site Request Forgery attack that allows a malicious user to have their GitHub project imported on another GitLab user account.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Gitlab
Products
Gitlab
CVE-2022-0141

Visual Form Builder < 3.0.8 - Entries Deletion/Restoration via CSRF

The Visual Form Builder WordPress plugin before 3.0.8 does not enforce nonce checks which could allow attackers to make a logged in admin or editor delete and restore arbitrary form entries via CSRF attacks

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Vfbpro
Products
Visual Form Builder
CVE-2022-0134

AnyComment < 0.2.18 - Arbitrary HyperComments Import/Revert via CSRF

The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features, allowing attackers to make logged in admin perform such actions via a CSRF attack

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Bologer
Products
Anycomment
CVE-2021-4168

Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2021-4164

Cross-Site Request Forgery (CSRF) in janeczku/calibre-web

calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Janeczku
Products
Calibre-web
CVE-2021-4162

Cross-Site Request Forgery (CSRF) in archivy/archivy

archivy is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Archivy Project
Products
Archivy
CVE-2021-4131

Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Livehelperchat
Products
Live Helper Chat
CVE-2021-4130

Cross-Site Request Forgery (CSRF) in snipe/snipe-it

snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Snipeitapp
Products
Snipe-it
CVE-2021-4123

Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Livehelperchat
Products
Live Helper Chat
CVE-2021-4082

Cross-Site Request Forgery (CSRF) in pimcore/pimcore

pimcore is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Pimcore
Products
Pimcore
CVE-2021-4049

Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Livehelperchat
Products
Live Helper Chat
CVE-2021-4033

Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Kimai
Products
Kimai 2
CVE-2021-4030

A cross-site request forgery vulnerability in the HTTP daemon of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execute arbitrary commands if they coerce or trick a local user to visit a compromised website with malicious scripts.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Zyxel
Products
Nbg6816 Nbg6816 Firmware Nbg6817 and 1 more
CVE-2021-4017

Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2021-4015

Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Firefly-iii
Products
Firefly Iii
CVE-2021-4005

Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Firefly-iii
Products
Firefly Iii
CVE-2021-46426

phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php of the subnets functionality.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Phpipam
Products
Phpipam
CVE-2021-46398

A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor user with admin privilege and get access to the filesystem via a malicious HTML webpage that is sent to the victim. An admin can run commands using the FileBrowser and hence it leads to RCE.

CVSS 3.1 · 8.8 High EPSS 6.7% KEV · Not listed
Vendors
Filebrowser
Products
Filebrowser
CVE-2021-46366

An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Magnolia-cms
Products
Magnolia Cms