The product does not properly verify that the source of data or communication is valid.
692 vulnerabilities with CWE-346
CVE-2024-10956
HIGH
GPT Academy 3.83 - Cross-Site WebSocket Hijacking via Insufficient Origin Validation
CVSS 7.1
CVE-2024-55948
HIGH
Discourse < 3.3.2 - Cache Poisoning via Anonymous XHR Request
CVSS 8.2
CVE-2024-57965
NONE
axios < 1.7.8 - Origin Validation Error in isURLSameOrigin
CVE-2024-21245
MEDIUM
Oracle JD Edwards EnterpriseOne Tools < 9.2.9.0 - Authenticated Origin Validation Error via HTTP
CVSS 5.4
CVE-2024-55917
HIGH
Trend Micro Apex One < 14.0.14203 and < 2019.13140 - Privilege Escalation via Origin Validation Error
CVSS 7.8
CVE-2024-56170
MEDIUM
nicmx/fort-validator < 1.6.6 - Origin Validation Error via Manifest Rollback
CVSS 5.3
CVE-2024-54490
MEDIUM
macOS < 15.2 - Unprotected User Data Exposure via Keychain Access
CVSS 5.5
CVE-2024-44212
MEDIUM
Safari < 18.1 - Origin Validation Error via Cookie Management
CVSS 5.3
CVE-2024-45495
MEDIUM
MSA FieldServer Gateway <6.5.2 - SSRF
CVSS 4.3
CVE-2024-51072
MEDIUM
KIA Seltos Instrument Cluster 1.0 - Denial of Service via ECU Reset UDS Service
CVSS 5.3
CVE-2024-51037
MEDIUM
kodbox < 1.52.04 - Sensitive Information Exposure via Captcha Feature in Password Reset
CVSS 5.3
CVE-2024-50654
HIGH
lilishop <= 4.2.4 - Incorrect Access Control via Coupon Collection Packet Replay
CVSS 7.5
CVE-2024-10534
CRITICAL
Dataprom Personnel Attendance Control... - Origin Validation Error
CVSS 9.8
CVE-2024-6674
HIGH
lollms_web_ui < 10 - Origin Validation Error via CORS Misconfiguration
CVSS 7.1
CVE-2024-10460
MEDIUM
Firefox < 132 and ESR < 128.4 - Origin Validation Error via Data URL in iframe
CVSS 5.3
CVE-2024-44734
HIGH
Mirotalk <9de226 - Privilege Escalation
CVSS 7.5
CVE-2024-9393
HIGH
Firefox < 131 and Firefox ESR < 115.16.0 - Origin Validation Error via Multipart Response
CVSS 7.5
CVE-2024-9392
CRITICAL
Firefox < 131 and ESR < 128.3 - Arbitrary Cross-Origin Page Loading via Compromised Content Process
CVSS 9.8
CVE-2024-44187
MEDIUM
Safari < 18 - Origin Validation Error in iframe Element
CVSS 6.5
CVE-2024-7978
MEDIUM
Google Chrome <128.0.6613.84 - Info Disclosure
CVSS 4.3
CVE-2024-41475
HIGH
Gnuboard g6 6.0.7 - Session Hijacking via CORS Misconfiguration
CVSS 8.8
CVE-2024-23458
HIGH
Zscaler Client Connector < 4.2.0.190 - Local Privilege Escalation via Reparse Point Bypass
CVSS 7.3
CVE-2024-41926
LOW
Mattermost 9.5.0-9.5.6 and 9.9.0 - Improper Access Control via RemoteId Spoofing
CVSS 2.7
CVE-2024-41143
HIGH
SKYSEA Client View 3.013.00-19.210.04e - Authenticated Arbitrary Process Execution via Origin Validation Error
CVSS 7.8
CVE-2024-22062
MEDIUM
ZXCLOUD IRAI - Privilege Escalation
CVSS 6.3
Details
Vulnerabilities
692