Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.1Nginx UI is a web user interface for the Nginx web server.EPSS 0.2%Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console.EPSS 0.1%Oct 12, 2026
- Low3.5Contao: Cross-site request forgery in custom backend actionsEPSS 0.1%Oct 9, 2026
- Medium5.3Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0EPSS 0.2%Oct 5, 2026
- Medium5.1Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0EPSS 0.2%Oct 5, 2026
- Critical10.0IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site request forgery which could allow an at…EPSS 0.2%Sep 18, 2026
- Medium5.1A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token.Sep 8, 2026
- Medium5.3Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An authenticated user with a valid order token cou…EPSS 0.2%Aug 21, 2026
- Medium4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b_b_d and earlier allows attackers to resume failed Multijob builds.EPSS 0.3%May 27, 2026
- Medium4.3A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.EPSS 0.1%May 27, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in WPGraphQL allows Cross Site Request Forgery.EPSS 0.1%May 7, 2026
- High8.8IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10…EPSS 0.2%Apr 1, 2026
- High8.8Authlib is a Python library which builds OAuth and OpenID Connect servers.EPSS 0.3%Jan 8, 2026
- Medium5.3A vulnerability was detected in PHPEMS up to 11.0.EPSS 0.3%Jan 1, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in freshchat Freshchat freshchat allows Cross Site Request Forgery.This issue affects Freshchat: from n/a through <= 2.3.4.EPSS 0.1%Dec 16, 2025
- High7.0OpenPLC_V3 is vulnerable to a cross-site request forgery (CSRF) attack due to the absence of proper CSRF validation.EPSS 0.3%Dec 13, 2025
- High8.8A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator v…EPSS 0.2%Dec 11, 2025
- Medium5.11Panel versions 1.10.33 through 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the panel name management functionality.EPSS 0.2%Dec 10, 2025
- High7.01Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality.EPSS 0.2%Dec 10, 2025
- Low3.5A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account.EPSS 0.2%Dec 10, 2025
- High7.01Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available from the settings panel (/settings/panel).EPSS 0.2%Dec 10, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in PSM Plugins SupportCandy supportcandy allows Cross Site Request Forgery.This issue affects SupportCandy: from n/a th…EPSS 0.1%Dec 9, 2025
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Cross Site Reque…EPSS 0.1%Dec 9, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in ProteusThemes Custom Sidebars by ProteusThemes custom-sidebars-by-proteusthemes allows Cross Site Request Forgery.Th…EPSS 0.1%Dec 9, 2025
- High7.0Some endpoints in vulnerability-lookup that modified application state (e.g.EPSS 0.2%Dec 8, 2025
32 records · page 1 of 2
PreviousNext