CWE-425 · Direct Request (Forced Browsing) (page 3)
Page 3 of 3 — CVEs classified under CWE-425, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-6669 | Medium | 6.3 | 2018-12-20 | A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows a remote or local user to execute blacklisted files thr… |
CVE-2018-18922 | Critical | 9.8 | 2018-12-13 | add_user in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/add_user.php POST request. |
CVE-2018-19620 | Medium | 4.3 | 2018-11-28 | ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id. |
CVE-2018-19207 | Critical | 9.8 | 2018-11-12 | The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb->prep… |
CVE-2018-19143 | Medium | 6.5 | 2018-11-11 | Open Ticket Request System (OTRS) 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified… |
CVE-2018-19109 | High | 8.8 | 2018-11-08 | tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the co… |
CVE-2018-16706 | High | 7.5 | 2018-09-14 | LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080. |
CVE-2018-3774 | Critical | 10.0 | 2018-08-12 | Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protoco… |
CVE-2018-7526 | High | 7.5 | 2018-05-24 | In TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23, by accessing a specific uniform resource locator (URL) on the… |
CVE-2018-11346 | Medium | 4.3 | 2018-05-22 | An insecure direct object reference vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows the ability to reference the "download_sys_settings"… |
CVE-2018-0267 | Medium | 6.5 | 2018-04-19 | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, local attacker to view sensitive data that should be… |
CVE-2018-0266 | Medium | 4.3 | 2018-04-19 | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. The vulnerab… |
CVE-2018-0198 | Medium | 5.3 | 2018-03-27 | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The vulner… |
CVE-2017-17736 | Critical | 9.8 | 2018-03-23 | Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 allows remote attackers to obtain Global Administrator access by visiting CMSInstall/install.aspx and then na… |
CVE-2017-14993 | High | 7.5 | 2018-02-20 | OXID eShop Community Edition before 6.0.0 RC3 (development), 4.10.x before 4.10.6 (maintenance), and 4.9.x before 4.9.11 (legacy), Enterprise Edition before 6… |
CVE-2018-0140 | Medium | 6.5 | 2018-02-08 | A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote a… |
CVE-2018-6624 | Critical | 9.8 | 2018-02-05 | OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as demonstrated… |
CVE-2018-0105 | Medium | 5.3 | 2018-01-18 | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The vulner… |
CVE-2017-15235 | High | 7.5 | 2017-10-11 | The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn pa… |
CVE-2017-14244 | Critical | 9.8 | 2017-09-17 | An authentication bypass vulnerability on iBall Baton ADSL2+ Home Router FW_iB-LR7011A_1.0.2 devices potentially allows attackers to directly access administra… |
CVE-2017-10833 | Critical | 9.1 | 2017-08-29 | "Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to bypass access restriction to view information or modify configuratio… |
CVE-2017-2161 | Low | 3.5 | 2017-05-22 | FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 and earlier allows aut… |
CVE-2017-2143 | Medium | 5.3 | 2017-04-28 | CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restr… |
CVE-2017-2139 | Medium | 5.3 | 2017-04-28 | CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows remot… |
CVE-2017-2486 | Medium | 6.5 | 2017-04-02 | An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It a… |
CVE-2015-2873 | | 2015-08-23 | Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8… | |
CVE-2005-1892 | | 2005-06-09 | FlatNuke 2.5.3 allows remote attackers to cause a denial of service or obtain sensitive information via (1) a direct request to foot_news.php, which triggers a… | |
CVE-2005-1827 | | 2005-05-26 | D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart the router or restore a saved configura… | |
CVE-2005-1698 | | 2005-05-24 | PostNuke 0.750 and 0.760RC3 allows remote attackers to obtain sensitive information via a direct request to (1) theme.php or (2) Xanthia.php in the Xanthia mod… | |
CVE-2005-1697 | | 2005-05-24 | The RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allows remote attackers to obtain sensitive information via a direct request to simple_smarty.php, which… | |
CVE-2005-1688 | Medium | 5.3 | 2005-05-20 | Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or… |
CVE-2005-1685 | | 2005-05-20 | episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp. | |
CVE-2005-1668 | | 2005-05-18 | YusASP Web Asset Manager 1.0 allows remote attackers to gain privileges via a direct request to assetmanager.asp. | |
CVE-2005-1654 | | 2005-05-18 | Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and… | |
CVE-2004-2257 | Medium | 5.3 | 2004-12-31 | phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request. |
CVE-2004-2144 | | 2004-12-31 | Baal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php. | |
CVE-2002-1798 | Critical | 9.1 | 2002-12-31 | MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive… |