The product does not properly verify that the source of data or communication is valid.
692 vulnerabilities with CWE-346
CVE-2024-5549
HIGH
stitionai devika - Origin Validation Error
CVSS 8.1
CVE-2024-36421
HIGH
Flowise 1.4.3 - Unauthenticated Origin Validation Error via CORS Misconfiguration
CVSS 7.5
CVE-2024-6301
MEDIUM
Conduit 0.8.0 - Federation User Impersonation via Origin Validation Bypass
CVSS 5.3
CVE-2024-37661
MEDIUM
TP-LINK TL-7DR5130 1.0.23 - Traffic Hijacking via Forged ICMP Redirect Messages
CVSS 6.3
CVE-2024-5905
MEDIUM
Cortex XDR Agent 7.9.0-7.9.101 and 8.1-8.1.1 - Local Denial of Service via Protection Mechanism Bypass
CVSS 4.4
CVE-2024-36303
HIGH
Trend Micro Apex One - Privilege Escalation
CVSS 7.8
CVE-2024-36302
HIGH
Trend Micro Apex One - Privilege Escalation
CVSS 7.8
CVE-2024-36472
MEDIUM
GNOME Shell through 45.7 - Unauthenticated Origin Validation Error via Portal Helper
CVSS 6.5
CVE-2024-28883
HIGH
BIG-IP APM Browser Network Access VPN Client 7.2.3-7.2.4.3 - Origin Validation Bypass
CVSS 7.4
CVE-2024-2377
HIGH
Hitachi Energy SDM600 - Origin Validation Error via HTTP Response Header
CVSS 7.6
CVE-2024-32764
CRITICAL
myQNAPcloud Link <2.4.51 - Privilege Escalation
CVSS 9.9
CVE-2024-1249
HIGH
Keycloak < 22.0.10 - Unauthenticated Denial of Service via OIDC checkLoginIframe Origin Validation Error
CVSS 7.4
CVE-2024-28224
MEDIUM
Ollama < 0.1.29 - Unauthenticated DNS Rebinding Attack
CVSS 6.6
CVE-2024-2447
MEDIUM
Mattermost <8.1.11-9.5.2 - Privilege Escalation
CVSS 6.5
CVE-2024-2182
MEDIUM
Open Virtual Network BFD Packets - Denial of Service
CVSS 6.5
CVE-2024-25996
MEDIUM
CHARX SEC-3000/3050/3100/3150 Firmware < 1.5.1 - Unauthenticated Remote Code Execution via Origin Validation Error
CVSS 5.3
CVE-2024-25124
CRITICAL
Fiber < 2.52.1 - Insecure CORS Configuration with Wildcard Origin and Credentials
CVSS 9.4
CVE-2024-26135
HIGH
MeshCentral < 1.1.21 - Cross-Site WebSocket Hijacking via control.ashx Endpoint
CVSS 8.3
CVE-2024-0009
MEDIUM
Palo Alto Networks PAN-OS 10.2.0-10.2.3 - Authenticated VPN Connection from Unauthorized IP via GlobalProtect Gateway
CVSS 6.3
CVE-2024-24782
MEDIUM
Hima F30/F35/F60 Firmware - Origin Verification Bypass via Ping Request
CVSS 4.3
CVE-2024-24557
MEDIUM
Moby < 24.0.9 - Cache Poisoning via Classic Builder Cache System
CVSS 6.9
CVE-2024-23898
HIGH
Jenkins 2.217-2.441 and LTS 2.222.1-2.426.2 - Cross-Site WebSocket Hijacking via CLI Endpoint
CVSS 8.8
CVE-2024-0814
MEDIUM
Google Chrome < 121.0.6167.85 - Security UI Spoofing via Payments
CVSS 6.5
CVE-2024-0749
MEDIUM
Firefox < 122.0 and Firefox ESR < 115.7 - Origin Validation Error via about: Dialog
CVSS 4.3
CVE-2023-49899
CRITICAL
Origin Validation Error in X-Rite MA-T6
CVSS 9.8
Details
Vulnerabilities
692