Vulnerabilities (CVE)

Filtered by CWE-352
Total 6423 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-39744 3 Ibm, Linux, Microsoft 4 Aix, Sterling Connect Direct Web Services, Linux Kernel and 1 more 2024-08-23 N/A 4.3 MEDIUM
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVE-2024-20486 2024-08-22 N/A 6.5 MEDIUM
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on the affected device with the privileges of the targeted user.
CVE-2024-42604 1 Pligg 1 Pligg Cms 2024-08-21 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_group.php?mode=delete&group_id=3
CVE-2024-42608 1 Pligg 1 Pligg Cms 2024-08-21 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/submit_page.php.
CVE-2024-42579 1 Siamonhasan 1 Warehouse Inventory System 2024-08-21 N/A 8.8 HIGH
A Cross-Site Request Forgery (CSRF) in the component add_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVE-2024-42612 2024-08-21 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?whitelist_add
CVE-2024-42577 1 Siamonhasan 1 Warehouse Inventory System 2024-08-21 N/A 8.8 HIGH
A Cross-Site Request Forgery (CSRF) in the component add_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVE-2024-42580 1 Siamonhasan 1 Warehouse Inventory System 2024-08-21 N/A 8.8 HIGH
A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVE-2024-42581 1 Siamonhasan 1 Warehouse Inventory System 2024-08-21 N/A 8.8 HIGH
A Cross-Site Request Forgery (CSRF) in the component delete_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVE-2024-42582 1 Siamonhasan 1 Warehouse Inventory System 2024-08-21 N/A 8.8 HIGH
A Cross-Site Request Forgery (CSRF) in the component delete_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVE-2024-42583 1 Siamonhasan 1 Warehouse Inventory System 2024-08-21 N/A 8.8 HIGH
A Cross-Site Request Forgery (CSRF) in the component delete_user.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVE-2024-42584 1 Siamonhasan 1 Warehouse Inventory System 2024-08-21 N/A 8.8 HIGH
A Cross-Site Request Forgery (CSRF) in the component delete_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVE-2024-42603 1 Pligg 1 Pligg Cms 2024-08-21 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=clearall
CVE-2024-42605 1 Pligg 1 Pligg Cms 2024-08-21 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/edit_page.php?link_id=1
CVE-2024-42606 1 Pligg 1 Pligg Cms 2024-08-21 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_log.php?clear=1
CVE-2024-42607 1 Pligg 1 Pligg Cms 2024-08-21 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=database
CVE-2024-42609 1 Pligg 1 Pligg Cms 2024-08-21 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=avatars
CVE-2024-42610 1 Pligg 1 Pligg Cms 2024-08-21 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=files
CVE-2024-42611 1 Pligg 1 Pligg Cms 2024-08-21 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_id=1&mode=delete
CVE-2024-42613 1 Pligg 1 Pligg Cms 2024-08-21 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=install&widget=akismet