Vulnerabilities > Cross-Site Request Forgery (CSRF)
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2017-03-27 | CVE-2017-6069 | Cross-Site Request Forgery (CSRF) vulnerability in Intelliants Subrion CMS 4.0.5 Subrion CMS 4.0.5 has CSRF in admin/blog/add/. | 6.8 |
| 2017-03-27 | CVE-2017-6068 | Cross-Site Request Forgery (CSRF) vulnerability in Intelliants Subrion CMS 4.0.5 Subrion CMS 4.0.5 has CSRF in admin/blocks/add/. | 6.8 |
| 2017-03-27 | CVE-2017-6066 | Cross-Site Request Forgery (CSRF) vulnerability in Intelliants Subrion CMS 4.0.5 Subrion CMS 4.0.5 has CSRF in admin/languages/edit/1/. | 6.8 |
| 2017-03-27 | CVE-2017-6002 | Cross-Site Request Forgery (CSRF) vulnerability in Intelliants Subrion CMS 4.0.5.10 Subrion CMS 4.0.5.10 has CSRF in admin/blog/add/. | 6.8 |
| 2017-03-23 | CVE-2015-8624 | Cross-Site Request Forgery (CSRF) vulnerability in Mediawiki The User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 does not perform token comparison in constant time before determining if a debugging message should be logged, which allows remote attackers to guess the edit token and bypass CSRF protection via a timing attack, a different vulnerability than CVE-2015-8623. | 6.8 |
| 2017-03-23 | CVE-2015-8623 | Cross-Site Request Forgery (CSRF) vulnerability in Mediawiki The User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12 and 1.24.x before 1.24.5 does not perform token comparison in constant time before returning, which allows remote attackers to guess the edit token and bypass CSRF protection via a timing attack, a different vulnerability than CVE-2015-8624. | 6.8 |
| 2017-03-23 | CVE-2016-5758 | Cross-Site Request Forgery (CSRF) vulnerability in Netiq Access Manager 4.1/4.2 A cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could be circumvented by repeated uploads causing a high load. | 8.8 |
| 2017-03-22 | CVE-2017-5874 | Cross-Site Request Forgery (CSRF) vulnerability in D-Link Dir-600M Firmware CSRF exists on D-Link DIR-600M Rev. | 8.8 |
| 2017-03-21 | CVE-2016-4504 | Cross-Site Request Forgery (CSRF) vulnerability in Meteocontrol Weblog A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions, Light all versions, Pro all versions, and Pro Unlimited all versions. | 6.8 |
| 2017-03-20 | CVE-2016-4928 | Cross-Site Request Forgery (CSRF) vulnerability in Juniper Junos Space 15.1/15.2 Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space. | 6.8 |