Cyber Security Daily Radar

#cwe-352

共收录 791 条相关情报。

← 返回所有主题
漏洞预警2026-09-10 发布INFO

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the LoginControl plugin PGP key endpoints that lack CS...

CVE-2026-88870

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability

历史摘要 · 未重新核验 · NVD

#cve#cwe-352
漏洞预警2026-09-10 发布INFO

Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4 - The gallery management controller tasks lacked authorization che...

CVE-2026-78084

Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4 - The gal

历史摘要 · 未重新核验 · NVD

#cve#cwe-284#cwe-352
漏洞预警2026-09-10 发布INFO

Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4 - The visitor booking (properties.book...

CVE-2026-78083

Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in S

历史摘要 · 未重新核验 · NVD

#cve#cwe-352
漏洞预警2026-09-08 发布INFO

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in plugin/YPTWallet/view/saveBalance.php that allows attackers...

CVE-2026-86724

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in pl

历史摘要 · 未重新核验 · NVD

#cve#cwe-352
漏洞预警2026-09-08 发布INFO

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 (master) contains a cross-site request forgery vulnerability in the CustomizeUser plugin endpoint plugin/Cust...

CVE-2026-86719

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 (master) contains a cross-site request forgery vulne

历史摘要 · 未重新核验 · NVD

#cve#cwe-352
漏洞预警2026-09-08 发布INFO

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in deleteHistory.json.php and finishAll.json.php that all...

CVE-2026-86718

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability

历史摘要 · 未重新核验 · NVD

#cve#cwe-352
漏洞预警2026-09-08 发布INFO

A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized snapshot creation...

CVE-2026-86135

A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a

历史摘要 · 未重新核验 · NVD

#cve#cwe-352#cwe-400
漏洞预警2026-09-08 发布INFO

A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token. An attacker with ...

CVE-2026-33920

A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to mis

历史摘要 · 未重新核验 · NVD

#cve#cwe-352
安全公告2026-09-08 发布INFO

SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request...

CVE-2026-76961

SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on c

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-352#severity:low
安全公告2026-09-08 发布INFO

SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request...

CVE-2026-76959

SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on c

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-352#severity:medium
安全公告2026-09-08 发布INFO

SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request...

CVE-2026-76960

SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on c

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-352#severity:low
漏洞预警2026-09-08 发布INFO

SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privile...

CVE-2026-76961

SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on c

历史摘要 · 未重新核验 · NVD

#cve#cwe-352
漏洞预警2026-09-08 发布INFO

SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privile...

CVE-2026-76960

SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on c

历史摘要 · 未重新核验 · NVD

#cve#cwe-352
漏洞预警2026-09-08 发布INFO

SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests due to this an attacker with low privileg...

CVE-2026-76959

SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on c

历史摘要 · 未重新核验 · NVD

#cve#cwe-352
漏洞预警2026-09-07 发布INFO

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects unknown...

CVE-2026-86307

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a061

历史摘要 · 未重新核验 · NVD

#cve#cwe-352#cwe-862
漏洞预警2026-09-07 发布INFO

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation ...

CVE-2026-86281

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Thi

历史摘要 · 未重新核验 · NVD

#cve#cwe-352#cwe-862
漏洞预警2026-09-05 发布LOW

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImportAction via unserialize. This issue ha...

CVE-2026-52777

CVE-2026-52777 是 YesWiki（一个基于 PHP 开发的 wiki 系统）中存在的已认证 PHP 对象注入漏洞。在 4.6.6 版本之前，BazarImportAction 功能在数据处理过程中使用了不安全的 unseri

历史摘要 · 未重新核验 · NVD

#cve#cwe-352#cwe-502
安全公告2026-09-04 发布INFO

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request...

CVE-2026-82712

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-352#severity:high
漏洞预警2026-09-04 发布INFO

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker to perform state changing op...

CVE-2026-82712

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability.

历史摘要 · 未重新核验 · NVD

#cve#cwe-352
漏洞预警2026-09-04 发布INFO

Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugins.php endpoint handles plugin installation, uninstallation, and update operat...

CVE-2026-53760

Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugins.php endpoint handl

历史摘要 · 未重新核验 · NVD

#cve#cwe-352