YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action ...
CVE-2026-116204
YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (tools/security/actions/de
#cwe-352
共收录 791 条相关情报。
← 返回所有主题A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element...
CVE-2026-116052
A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function.
A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function. Performing a manipulation results in cross-site request f...
CVE-2026-116052
A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function.
A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of...
CVE-2026-115796
A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Manag
A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cro...
CVE-2026-115796
A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Manag
A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network Edition allows an attacker to link an attacker-controlled external ...
CVE-2026-93631
A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network Edition al
Electron: SameSite cookie restrictions are not applied to windows opened from links
CVE-2026-113796
### Impact Pages opened into a new window from a link were loaded as if the app itself had navigated there rather than
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Tawk.to - Live chat application allows...
CVE-2026-96388
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Tawk.to - Live chat application allows Cross Site Request Forg
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site...
CVE-2026-96374
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in...
CVE-2026-114719
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk actio
Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that...
CVE-2026-114662
Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that allows unauthenticated att
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue affects Project Browser versions: from 0.0.0 to 2.0.3, fr...
CVE-2026-96374
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of the markasjunk plugin. The plugin read the _uid para...
CVE-2026-114719
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk actio
Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that allows unauthenticated attackers to steal API keys by choosing token request IDs. A...
CVE-2026-114662
Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that allows unauthenticated att
CVE-2026-114719
CVE-2026-114719
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk actio
Project Browser - Critical - Cross-site request forgery - SA-CONTRIB-2026-178
CVE-2026-96374
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue
In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with the edit_federated_providers capabilit...
CVE-2026-76297
In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that
Cross-Site Request Forgery (CSRF) vulnerability in Tailored Media Tailored Tools tailored-tools allows Cross Site Request Forgery.This issue affects Tailored Tools: from n/a thr...
CVE-2026-111401
Cross-Site Request Forgery (CSRF) vulnerability in Tailored Media Tailored Tools tailored-tools allows Cross Site Reques
Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker to make an authenticated user's browser perform a state-...
CVE-2026-114470
Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker
Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote...
CVE-2026-114093
Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote attackers to log out aut