Filtered by CWE-352
Filtered by vendor Subscriptions
Total 8416 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-18708 1 Netgear 4 R8300, R8300 Firmware, R8500 and 1 more 2024-11-21 8.8 High
Certain NETGEAR devices are affected by CSRF. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94.
CVE-2017-18703 1 Netgear 56 D1500, D1500 Firmware, D500 and 53 more 2024-11-21 8.8 High
Certain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0.0.25, D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800 before 1.0.1.28, EX6100v2 before 1.0.1.60, EX6150v2 before 1.0.1.60, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.16, JWNR2010v5 before 1.1.0.46, PR2000 before 1.0.0.18, R6020 before 1.0.0.26, R6050 before 1.0.1.16, R6080 before 1.0.0.26, R6100 before 1.0.1.20, R6220 before 1.1.0.60, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WN3000RPv3 before 1.0.2.50, WN3100RPv2 before 1.0.0.40, WNDR3700v5 before 1.1.0.48, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, WNR1000v4 before 1.1.0.46, WNR2000v5 before 1.0.0.62, WNR2020 before 1.1.0.46, and WNR2050 before 1.1.0.46.
CVE-2017-18607 1 Theme-fusion 1 Avada 2024-11-21 8.8 High
The avada theme before 5.1.5 for WordPress has CSRF.
CVE-2017-18569 1 Mythemeshop 1 My Wp Translate 2024-11-21 N/A
The my-wp-translate plugin before 1.0.4 for WordPress has CSRF.
CVE-2017-18547 1 Neliosoftware 1 Nelio Ab Testing 2024-11-21 N/A
The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.
CVE-2017-18546 1 Jayj Quicktag Project 1 Jayj Quicktag 2024-11-21 N/A
The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF.
CVE-2017-18544 1 Invite Anyone Project 1 Invite Anyone 2024-11-21 N/A
The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF.
CVE-2017-18523 1 Eelv Newsletter Project 1 Eelv Newsletter 2024-11-21 N/A
The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.
CVE-2017-18521 1 Wp-kama 1 Democracy Poll 2024-11-21 N/A
The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n.
CVE-2017-18513 1 Expresstech 1 Responsive Menu 2024-11-21 N/A
The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface.
CVE-2017-18512 1 Supsystic 1 Newsletter By Supsystic 2024-11-21 N/A
The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF.
CVE-2017-18511 1 Wpmudev 1 Custom Sidebars 2024-11-21 N/A
The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF.
CVE-2017-18510 1 Wpmudev 1 Custom Sidebars 2024-11-21 N/A
The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions.
CVE-2017-18504 1 Wpdeveloper 1 Twitter Cards Meta 2024-11-21 N/A
The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF.
CVE-2017-18485 1 Elementalpath 2 Cognitoys Dino, Cognitoys Dino Firmware 2024-11-21 N/A
Cognitoys Dino devices allow profiles_add.html CSRF.
CVE-2017-18366 1 Intelliants 1 Subrion Cms 2024-11-21 N/A
Subrion CMS 4.1.5 has CSRF in blog/delete/.
CVE-2017-18107 1 Atlassian 1 Crowd 2024-11-21 6.5 Medium
Various resources in the Crowd Demo application of Atlassian Crowd before version 3.1.1 allow remote attackers to modify add, modify and delete users & groups via a Cross-site request forgery (CSRF) vulnerability. Please be aware that the Demo application is not enabled by default.
CVE-2017-18080 1 Atlassian 1 Bamboo 2024-11-21 N/A
The saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify security settings via a Cross-site request forgery (CSRF) vulnerability.
CVE-2017-18042 1 Atlassian 1 Bamboo 2024-11-21 N/A
The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user data including passwords via a Cross-site request forgery (CSRF) vulnerability.
CVE-2017-18033 1 Atlassian 1 Jira 2024-11-21 N/A
The Jira-importers-plugin in Atlassian Jira before version 7.6.1 allows remote attackers to create new projects and abort an executing external system import via various Cross-site request forgery (CSRF) vulnerabilities.