Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (8760 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2018-2000 1 Ibm 2 Business Automation Workflow, Business Process Manager 2024-11-21 N/A
IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 154890.
CVE-2018-25096 1 Petrk94 1 Ownhealthrecord 2024-11-21 4.3 Medium
A vulnerability was found in MdAlAmin-aol Own Health Record 0.1-alpha/0.2-alpha/0.3-alpha/0.3.1-alpha. It has been rated as problematic. This issue affects some unknown processing of the file includes/logout.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 0.4-alpha is able to address this issue. The patch is named 58b413aa40820b49070782c786c526850ab7748f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-249191.
CVE-2018-21160 1 Netgear 1 Readynas Os 2024-11-21 8.8 High
NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF.
CVE-2018-21120 1 Netgear 22 Wac120, Wac120 Firmware, Wac505 and 19 more 2024-11-21 8.0 High
Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.
CVE-2018-21102 1 Netgear 1 Readynas Os Firmware 2024-11-21 8.8 High
NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF.
CVE-2018-21096 1 Netgear 22 Wac120, Wac120 Firmware, Wac505 and 19 more 2024-11-21 7.4 High
Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.
CVE-2018-21070 2 Google, Qualcomm 3 Android, Msm8998, Sdm845 2024-11-21 8.4 High
An issue was discovered on Samsung mobile devices with N(7.x), O(8.0) devices (MSM8998 or SDM845 chipsets) software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 (May 2018).
CVE-2018-21037 1 Intelliants 1 Subrion 2024-11-21 8.8 High
Subrion CMS 4.1.5 (and possibly earlier versions) allow CSRF to change the administrator password via the panel/members/edit/1 URI.
CVE-2018-21006 1 Bbpress Move Topics Project 1 Bbpress Move Topics 2024-11-21 N/A
The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF.
CVE-2018-21002 1 Joomsky 1 Js Help Desk 2024-11-21 N/A
The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.
CVE-2018-20974 1 Joomsky 1 Js Job Manager 2024-11-21 N/A
The js-jobs plugin before 1.0.7 for WordPress has CSRF.
CVE-2018-20972 1 Codeermeneer 1 Companion Auto Update 2024-11-21 N/A
The companion-auto-update plugin before 3.2.1 for WordPress has CSRF.
CVE-2018-20971 1 Churchadminplugin 1 Church Admin 2024-11-21 N/A
The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan.
CVE-2018-20968 1 Smackcoders 1 Ultimate Exporter 2024-11-21 N/A
The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF.
CVE-2018-20967 1 Smackcoders 1 Import All Pages\, Post Types\, Products\, Orders\, And Users As Xml \& Csv 2024-11-21 N/A
The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF.
CVE-2018-20964 1 Codepeople 1 Contact Form Email 2024-11-21 N/A
The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF.
CVE-2018-20934 1 Cpanel 1 Cpanel 2024-11-21 N/A
cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411).
CVE-2018-20872 1 I-lan 1 Draytekl Firmware 2024-11-21 N/A
DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related issue to CVE-2017-11649.
CVE-2018-20848 1 Peel 1 Peel Shopping 2024-11-21 N/A
Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as demonstrated by an XSS payload in the couleurId[0] parameter to the latter.
CVE-2018-20816 1 Salesagility 1 Suitecrm 2024-11-21 N/A
An XSS combined with CSRF vulnerability discovered in SalesAgility SuiteCRM 7.x before 7.8.24 and 7.10.x before 7.10.11 leads to cookie stealing, aka session hijacking. This issue affects the "add dashboard pages" feature where users can receive a malicious attack through a phished URL, with script executed.