Vulnerabilities > Origin Validation Error

DATE CVE VULNERABILITY TITLE RISK
2020-10-16 CVE-2020-16952 Origin Validation Error vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package.
network
low complexity
microsoft CWE-346
8.6
2020-10-16 CVE-2020-16951 Origin Validation Error vulnerability in Microsoft products
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package.
network
low complexity
microsoft CWE-346
8.6
2020-10-16 CVE-2020-9903 Origin Validation Error vulnerability in Apple Iphone OS
A logic issue was addressed with improved restrictions.
network
low complexity
apple CWE-346
7.5
2020-10-02 CVE-2020-26527 Origin Validation Error vulnerability in Damstratechnology Smart Asset 2020.7
An issue was discovered in API/api/Version in Damstra Smart Asset 2020.7.
network
low complexity
damstratechnology CWE-346
critical
9.8
2020-09-18 CVE-2020-15773 Origin Validation Error vulnerability in Gradle Enterprise
An issue was discovered in Gradle Enterprise before 2020.2.4.
network
low complexity
gradle CWE-346
6.5
2020-09-16 CVE-2020-14519 Origin Validation Error vulnerability in Wibu Codemeter 6.50A/6.81/6.90
This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including Version 7.0 or newer with the affected WebSockets API still enabled.
network
low complexity
wibu CWE-346
7.5
2020-08-10 CVE-2020-15652 Origin Validation Error vulnerability in multiple products
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect.
network
low complexity
mozilla canonical CWE-346
6.5
2020-08-07 CVE-2020-16168 Origin Validation Error vulnerability in Robotemi Temi Firmware
Origin Validation Error in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to access the REST API and MQTT broker used by the temi and send it custom data/requests via unspecified vectors.
network
low complexity
robotemi CWE-346
6.5
2020-07-14 CVE-2020-1449 Origin Validation Error vulnerability in Microsoft 365 Apps, Office and Project 2016
A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'.
local
low complexity
microsoft CWE-346
7.8
2020-07-14 CVE-2020-1408 Origin Validation Error vulnerability in Microsoft products
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.
network
low complexity
microsoft CWE-346
8.8