|
219051
|
8.8 |
HIGH
Network
|
waspthemes
|
custom_css_pro
|
Cross-site request forgery (CSRF) vulnerability in Custom CSS Pro 1.0.3 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
|
CWE-352
Origin Validation Error
|
CVE-2019-5984
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219052
|
8.8 |
HIGH
Network
|
fla-shop
|
html5_maps
|
Cross-site request forgery (CSRF) vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
|
CWE-352
Origin Validation Error
|
CVE-2019-5983
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219053
|
7.5 |
HIGH
Adjacent
|
sony
|
vaio_update
|
Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to conduct a man-in-the-middle attack via a malicous wireless LAN access point. A succ…
|
CWE-494
Download of Code Without Integrity Check
|
CVE-2019-5982
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219054
|
7.8 |
HIGH
Local
|
sony
|
vaio_update
|
Improper authorization vulnerability in VAIO Update 7.3.0.03150 and earlier allows an attackers to execute arbitrary executable file with administrative privilege via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2019-5981
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219055
|
8.8 |
HIGH
Network
|
meomundo
|
related_youtube_videos
|
Cross-site request forgery (CSRF) vulnerability in Related YouTube Videos versions prior to 1.9.9 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
|
CWE-352
Origin Validation Error
|
CVE-2019-5980
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219056
|
8.8 |
HIGH
Network
|
najeebmedia
|
personalized_woocommerce_cart_page
|
Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
|
CWE-352
Origin Validation Error
|
CVE-2019-5979
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219057
|
8.8 |
HIGH
Network
|
contest-gallery
|
contest_gallery
|
Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
|
CWE-352
Origin Validation Error
|
CVE-2019-5974
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219058
|
8.8 |
HIGH
Network
|
sukimalab
|
online_lesson_booking
|
Cross-site request forgery (CSRF) vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
|
CWE-352
Origin Validation Error
|
CVE-2019-5973
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219059
|
6.1 |
MEDIUM
Network
|
sukimalab
|
online_lesson_booking
|
Cross-site scripting vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2019-5972
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219060
|
8.8 |
HIGH
Network
|
sukimalab
|
attendance_manager
|
Cross-site request forgery (CSRF) vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
|
CWE-352
Origin Validation Error
|
CVE-2019-5971
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|