Vulnerabilities > Origin Validation Error

DATE CVE VULNERABILITY TITLE RISK
2019-10-09 CVE-2019-15020 Origin Validation Error vulnerability in Zingbox Inspector
A security vulnerability exists in the Zingbox Inspector versions 1.293 and earlier, that could allow an attacker to supply an invalid software update image to the Zingbox Inspector that could result in command injection.
network
low complexity
zingbox CWE-346
critical
9.8
2019-10-08 CVE-2019-3980 Origin Validation Error vulnerability in Solarwinds Dameware Mini Remote Control 12.1.0.89
The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host.
network
low complexity
solarwinds CWE-346
critical
9.8
2019-09-12 CVE-2019-16275 Origin Validation Error vulnerability in multiple products
hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled.
low complexity
w1-fi debian canonical CWE-346
6.5
2019-09-12 CVE-2019-8069 Origin Validation Error vulnerability in Adobe Flash Player and Flash Player Desktop Runtime
Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Same Origin Method Execution vulnerability.
network
low complexity
adobe CWE-346
critical
9.8
2019-09-11 CVE-2019-1235 Origin Validation Error vulnerability in Microsoft products
An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server process does not validate the source of input or commands it receives, aka 'Windows Text Service Framework Elevation of Privilege Vulnerability'.
local
low complexity
microsoft CWE-346
7.8
2019-09-11 CVE-2019-16237 Origin Validation Error vulnerability in multiple products
Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313_message_archive_management.vala.
network
low complexity
dino canonical fedoraproject debian CWE-346
7.5
2019-09-11 CVE-2019-16235 Origin Validation Error vulnerability in multiple products
Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280_message_carbons.vala.
network
low complexity
dino canonical fedoraproject debian CWE-346
7.5
2019-08-20 CVE-2019-5036 Origin Validation Error vulnerability in Google Nest CAM IQ Indoor Firmware 4620002
An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor, version 4620002.
network
low complexity
google CWE-346
7.5
2019-07-23 CVE-2019-9817 Origin Validation Error vulnerability in Mozilla Thunderbird
Images from a different domain can be read using a canvas object in some circumstances.
network
low complexity
mozilla CWE-346
5.3
2019-07-23 CVE-2019-11723 Origin Validation Error vulnerability in multiple products
A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context.
network
low complexity
mozilla opensuse CWE-346
7.5