Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.1Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability in the web-based administrative interface.Feb 23, 2026
- High7.1GetSimple CMS is a content management system.Feb 21, 2026
- Medium5.3OrientDB 3.0.17 GA Community Edition contains cross-site request forgery vulnerabilities that allow attackers to perform unauthorized actions by crafting malicious req…Feb 20, 2026
- High8.8Authlib is a Python library which builds OAuth and OpenID Connect servers.EPSS 0.3%Jan 8, 2026
- Medium5.3A vulnerability was detected in PHPEMS up to 11.0.EPSS 0.3%Jan 1, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in freshchat Freshchat freshchat allows Cross Site Request Forgery.This issue affects Freshchat: from n/a through <= 2.3.4.EPSS 0.1%Dec 16, 2025
- High7.0OpenPLC_V3 is vulnerable to a cross-site request forgery (CSRF) attack due to the absence of proper CSRF validation.EPSS 0.3%Dec 13, 2025
- High8.8A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator v…EPSS 0.2%Dec 11, 2025
- Medium5.11Panel versions 1.10.33 through 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the panel name management functionality.EPSS 0.2%Dec 10, 2025
- High7.01Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality.EPSS 0.2%Dec 10, 2025
- Low3.5A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account.EPSS 0.2%Dec 10, 2025
- High7.01Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available from the settings panel (/settings/panel).EPSS 0.2%Dec 10, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in PSM Plugins SupportCandy supportcandy allows Cross Site Request Forgery.This issue affects SupportCandy: from n/a th…EPSS 0.1%Dec 9, 2025
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Cross Site Reque…EPSS 0.1%Dec 9, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in ProteusThemes Custom Sidebars by ProteusThemes custom-sidebars-by-proteusthemes allows Cross Site Request Forgery.Th…EPSS 0.1%Dec 9, 2025
- High7.0Some endpoints in vulnerability-lookup that modified application state (e.g.EPSS 0.2%Dec 8, 2025
- Critical9.4Ray-Project Ray Code Injection VulnerabilityKEVEPSS 62.5%Nov 26, 2025
- High8.8PaperCut NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityKEVEPSS 28.6%Jun 20, 2023
- Critical9.8Sumavision EMR Cross-Site Request Forgery (CSRF) VulnerabilityKEVEPSS 14.7%Mar 11, 2020
- High8.8NETGEAR Multiple Routers Remote Code Execution VulnerabilityKEVEPSS 99.8%Dec 14, 2016
- High8.8The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF token…EPSS 9.7%Feb 25, 2016
- High8.0D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) VulnerabilityKEVEPSS 43.5%Jan 13, 2015
- High8.1Cisco IOS Cross-Site Request Forgery VulnerabilityKEVEPSS 33.9%Sep 18, 2008
48 records · page 2 of 2
PreviousNext