The product does not properly verify that the source of data or communication is valid.
692 vulnerabilities with CWE-346
CVE-2022-29818
LOW
JetBrains IntelliJ IDEA < 2022.1 - Origin Validation Error in Internal Web Server
CVSS 3.9
CVE-2022-22594
MEDIUM
Safari < 15.3 - Cross-Origin Data Leak via IndexedDB API
CVSS 6.5
CVE-2022-24762
MEDIUM
sysend.js < 1.10.0 - Origin Validation Error
CVSS 6.5
CVE-2022-25146
MEDIUM
Liferay Portal 7.4.3.4-7.4.3.8 and DXP < 7.4.13.u5 - CSRF Token Exfiltration via Remote App Event Message
CVSS 5.3
CVE-2022-0120
MEDIUM
Google Chrome < 97.0.4692.71 - Origin Validation Error via Password Manager
CVSS 6.5
CVE-2022-0113
MEDIUM
Google Chrome <97.0.4692.71 - Info Disclosure
CVSS 6.5
CVE-2022-0111
MEDIUM
Google Chrome < 97.0.4692.71 - Origin Validation Error via Crafted HTML Page
CVSS 6.5
CVE-2022-0108
MEDIUM
Google Chrome <97.0.4692.71 - Info Disclosure
CVSS 6.5
CVE-2022-21712
HIGH
Twisted 11.1.0-22.1.0 - Origin Validation Error in RedirectAgent
CVSS 7.5
CVE-2022-23032
MEDIUM
F5 BIG-IP APM <11.6.5 & Client <7.1.9 DNS Rebinding via Proxy
CVSS 5.3
CVE-2021-47157
CRITICAL
Kossy < 0.60 - JSON Hijacking via X-Requested-With Header Mishandling
CVSS 9.8
CVE-2021-26737
MEDIUM
Zscaler Client Connector < 3.6 - Unauthenticated Denial of Service via RPC Client Validation Race Condition
CVSS 5.5
CVE-2021-26735
MEDIUM
Zscaler Client Connector < 3.6 - Unquoted Search Path Privilege Escalation
CVSS 6.7
CVE-2021-33959
HIGH
Plex Media Server < 1.21 - Denial of Service via DDOS Reflection Attack
CVSS 7.5
CVE-2021-32985
HIGH
AVEVA System Platform <2020 R2 P01 - Info Disclosure
CVSS 7.2
CVE-2021-46701
HIGH
PreMiD 2.2.0 - Unauthenticated WebSocket Event Interception
CVSS 7.2
CVE-2021-44458
HIGH
Mirantis Lens < 5.2.6 - Unauthenticated Remote Code Execution via WebSocket Terminal Feature
CVSS 8.3
CVE-2021-45441
HIGH
Trend Micro Apex One - Privilege Escalation via Pipe Command Injection
CVSS 7.8
CVE-2021-4024
MEDIUM
Podman <3.4.3 - gvproxy API Exposure Allows Host-to-VM Port Forwarding
CVSS 6.5
CVE-2021-44935
CRITICAL
glFusion CMS v1.7.9 - Arbitrary User Impersonation via Comment Endpoint
CVSS 9.1
CVE-2021-39063
CRITICAL
IBM Spectrum Protect Plus 10.1.0-10.1.8.x - Origin Validation Error via CORS Misconfiguration
CVSS 9.1
CVE-2021-43531
MEDIUM
Firefox < 94.0 - Origin Validation Error via Web Extension Context Menu
CVSS 4.3
CVE-2021-38507
MEDIUM
HTTP2 Opportunistic Encryption - SSRF
CVSS 6.5
CVE-2021-38497
MEDIUM
Firefox < 93, Thunderbird < 91.2, Firefox ESR < 91.2 - CSRF
CVSS 6.5
CVE-2021-41158
MEDIUM
FreeSWITCH <1.10.7 - Info Disclosure
CVSS 5.8
Details
Vulnerabilities
692