CWE-346

A vulnerability classified as problematic was found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0. Affected by this vulnerabilit

A vulnerability, which was classified as problematic, has been found in Freeebird Hotel 酒店管理系统 API up to 1.2. Affected b

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by

In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a po

Improper Verification of Source of a Communication Channel in Work Desktop for Mac versions 10.8.1.46 and earlier allo

"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insuffici

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core

DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protection

A broken authorization vulnerability in Kiloview NDI N30 allows a remote unauthenticated attacker to deactivate user ver

Authentication issue that does not verify the source of a packet which could allow an attacker to create a denial-of-ser

A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited,

The Kossy module before 0.60 for Perl allows JSON hijacking because of X-Requested-With mishandling.

A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability aff

Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems (PACS) / Access Contr

Fiber is a web framework written in go. Prior to version 2.52.1, the CORS middleware allows for insecure configurations

parseWildcardRules in Gin-Gonic CORS middleware before 1.6.0 mishandles a wildcard at the end of an origin string, e.g.,

Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin valid

NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability. This vulnerability allows network-adjacent

Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration.

There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerabili

A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when pa

MeshCentral is a full computer management web site. Versions prior to 1.1.21 a cross-site websocket hijacking (CSWSH) vu

A CORS misconfiguration in the stitionai/devika repository allows attackers to steal sensitive information such as logs,

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacke

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on

A vulnerability exists in the too permissive HTTP response header web server settings of the SDM600. An attacker can tak

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, A

An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js

Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a

lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quant

A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages.

An origin validation vulnerability exists in BIG-IP APM browser network access VPN client for Windows, macOS and

While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks,

A CORS misconfiguration in parisneo/lollms-webui prior to version 10 allows attackers to steal sensitive information suc

Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system i

In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexe

Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, there

Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof

A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high avail

Mattermost versions 8.1.x before 8.1.11, 9.3.x before 9.3.3, 9.4.x before 9.4.4, and 9.5.x before 9.5.2 fail to authenti