Vulnerabilities > Cross-Site Request Forgery (CSRF)

DATE CVE VULNERABILITY TITLE RISK
2022-10-18 CVE-2022-3582 Cross-Site Request Forgery (CSRF) vulnerability in Oretnom23 Simple Cold Storage Management System 1.0
A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic.
network
low complexity
oretnom23 CWE-352
3.5
2022-10-17 CVE-2020-8976 Cross-Site Request Forgery (CSRF) vulnerability in Zigor ZGR Tps200 NG Firmware 2.00
The integrated server of the ZGR TPS200 NG on its 2.00 firmware version and 1.01 hardware version, allows a remote attacker to perform actions with the permissions of a victim user.
network
low complexity
zigor CWE-352
8.8
2022-10-17 CVE-2022-23771 Cross-Site Request Forgery (CSRF) vulnerability in Iptime products
This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products.
network
low complexity
iptime CWE-352
8.8
2022-10-14 CVE-2022-42070 Cross-Site Request Forgery (CSRF) vulnerability in Oretnom23 Online Birth Certificate Management System 1.0
Online Birth Certificate Management System version 1.0 is vulnerable to Cross Site Request Forgery (CSRF).
network
low complexity
oretnom23 CWE-352
8.8
2022-10-13 CVE-2022-35611 Cross-Site Request Forgery (CSRF) vulnerability in Bevywise Mqttroute 3.3
A Cross-Site Request Forgery (CSRF) in MQTTRoute v3.3 and below allows attackers to create and remove dashboards.
network
low complexity
bevywise CWE-352
4.3
2022-10-13 CVE-2022-41474 Cross-Site Request Forgery (CSRF) vulnerability in Rpcms 3.0.2
RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily change the password of any account.
network
low complexity
rpcms CWE-352
6.5
2022-10-13 CVE-2022-41475 Cross-Site Request Forgery (CSRF) vulnerability in Rpcms 3.0.2
RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add an administrator account.
network
low complexity
rpcms CWE-352
8.8
2022-10-13 CVE-2022-41489 Cross-Site Request Forgery (CSRF) vulnerability in Wayos products
WAYOS LQ_09 22.03.17V was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to send crafted requests to the server from the affected device.
network
low complexity
wayos CWE-352
8.1
2022-10-13 CVE-2022-34020 Cross-Site Request Forgery (CSRF) vulnerability in Resiot IOT Platform and Lorawan Network Server
Cross Site Request Forgery (CSRF) vulnerability in ResIOT ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 allows attackers to add new admin users to the platform or other unspecified impacts.
network
low complexity
resiot CWE-352
8.8
2022-10-12 CVE-2022-42077 Cross-Site Request Forgery (CSRF) vulnerability in Tenda Ac1206 Firmware 15.03.06.23Multitd01
Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot.
network
low complexity
tenda CWE-352
6.5