#cwe-352

共收录 796 条相关情报。

← 返回所有主题
漏洞预警2026-05-04 发布INFO

goshs is a SimpleHTTPServer written in Go. Prior to version 2.0.2, the PUT upload handler (httpserver/updown.go) lacks the CSRF token validation that was added to the POST uploa...

CVE-2026-42091

goshs is a SimpleHTTPServer written in Go. Prior to version 2.0.2, the PUT upload handler (httpserver/updown.go) lacks t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.9.2. This is due to missing nonce verification in the 'a...

CVE-2026-3772

The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

The Ultimate Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.14. This is due to a flawed nonce validation co...

CVE-2026-3140

The Ultimate Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu

历史摘要 · 未重新核验 · NVD

安全公告2026-04-30 发布INFO

A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U...

CVE-2026-36960

A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U-SPEED N300 Rounter V1.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-30 发布INFO

A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U-SPEED N300 Rounter V1.0.0. The device does not implement CSRF protection mechan...

CVE-2026-36960

A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U-SPEED N300 Rounter V1.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0. The router fails to implement proper CSR...

CVE-2026-36956

A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireles

历史摘要 · 未重新核验 · NVD

安全公告2026-04-29 发布INFO

Admidio has CSRF on Admin Preferences that Triggers Unauthorized Backup, .htaccess Write, and Email Send

CVE-2026-41663

## Summary Several administrative operations in Admidio's preferences module (database backup, test email, htaccess gen

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-29 发布INFO

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary system command...

CVE-2018-25310

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows au

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-29 发布INFO

Merge PACS 7.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by crafting malicious HTML forms targeting the merge-vie...

CVE-2018-25298

Merge PACS 7.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions

历史摘要 · 未重新核验 · NVD

安全公告2026-04-29 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode...

CVE-2026-42645

Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Or

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-29 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-i...

CVE-2026-42645

Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Or

历史摘要 · 未重新核验 · NVD

安全公告2026-04-29 发布INFO

A vulnerability has been found in Koillection up to 1.6.18. Affected is an unknown function of...

CVE-2025-9747

A vulnerability has been found in Koillection up to 1.6.18. Affected is an unknown function of the file assets/controlle

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-27 发布INFO

Cross Site Request Forgery vulnerability in diskoverdata diskover-community v.2.3.5. and before allows a remote attacker to escalate privileges and obtain sensitive information ...

CVE-2026-38934

Cross Site Request Forgery vulnerability in diskoverdata diskover-community v.2.3.5. and before allows a remote attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0. This affects an unknown function. Such manipulation leads to cross-site request forger...

CVE-2026-7108

A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0. This affects an unknown funct

历史摘要 · 未重新核验 · NVD

漏洞预警2023-06-03 发布MEDIUM

The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.27.133. This is due to missing or incorrect nonce ...

CVE-2023-3055

The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includ

来源摘录 · NVD

漏洞预警2011-07-27 发布MEDIUM

A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote attacker to hijack the authentication of arbitrary users. ...

CVE-2009-4139

A flaw was found in Spacewalk Java site packages. This cross-site request forgery (CSRF) vulnerability allows a remote a

来源摘录 · NVD