Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.1Nginx UI is a web user interface for the Nginx web server.Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console.Oct 12, 2026
- Low3.5Contao: Cross-site request forgery in custom backend actionsEPSS 0.1%Oct 9, 2026
- Medium5.3Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0Oct 5, 2026
- Medium5.1Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0Oct 5, 2026
- Critical10.0IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site request forgery which could allow an at…Sep 18, 2026
- Medium5.3Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An authenticated user with a valid order token cou…Aug 21, 2026
- Medium4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b_b_d and earlier allows attackers to resume failed Multijob builds.May 27, 2026
- Medium4.3A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.May 27, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in WPGraphQL allows Cross Site Request Forgery.May 7, 2026
- High8.8IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10…Apr 1, 2026
- High8.8Authlib is a Python library which builds OAuth and OpenID Connect servers.Jan 8, 2026
- Medium5.3A vulnerability was detected in PHPEMS up to 11.0.Jan 1, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in freshchat Freshchat freshchat allows Cross Site Request Forgery.This issue affects Freshchat: from n/a through <= 2.3.4.Dec 16, 2025
- High7.0OpenPLC_V3 is vulnerable to a cross-site request forgery (CSRF) attack due to the absence of proper CSRF validation.Dec 13, 2025
- Critical9.4Ray-Project Ray Code Injection VulnerabilityKEVEPSS 62.5%Nov 26, 2025
- High8.8PaperCut NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityKEVEPSS 28.6%Jun 20, 2023
- Critical9.8Sumavision EMR Cross-Site Request Forgery (CSRF) VulnerabilityKEVEPSS 14.7%Mar 11, 2020
- High8.8NETGEAR Multiple Routers Remote Code Execution VulnerabilityKEVEPSS 99.8%Dec 14, 2016
- High8.0D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) VulnerabilityKEVEPSS 43.5%Jan 13, 2015
- High8.1Cisco IOS Cross-Site Request Forgery VulnerabilityKEVEPSS 33.9%Sep 18, 2008
21 records · page 1 of 1
PreviousNext