The product does not properly verify that the source of data or communication is valid.
692 vulnerabilities with CWE-346
CVE-2021-21135
MEDIUM
Google Chrome <88.0.4324.96 - Info Disclosure
CVSS 6.5
CVE-2021-20199
MEDIUM
Podman 1.8.0-3.0.0 - Origin Validation Error in Rootless Containers
CVSS 5.9
CVE-2020-24772
HIGH
Dreamacro Clash for Windows 0.11.4 - Origin Validation Error via Malicious Iframe URL
CVSS 8.8
CVE-2020-9060
MEDIUM
Silicon Labs 500 Series Firmware - Denial of Service via Malformed Z-Wave S2 Messages
CVSS 6.5
CVE-2020-27969
HIGH
Yandex Browser for Android < 20.8.4 - Same-Origin Policy Bypass and Address Bar Spoofing
CVSS 7.3
CVE-2020-15734
MEDIUM
Bitdefender Safepay < 25.0.7.29 - Origin Validation Error via File Upload Manipulation
CVSS 5.5
CVE-2020-4881
HIGH
IBM Planning Analytics 2.0 - Sensitive Information Exposure via SSL/TLS Server Hostname Verification Bypass
CVSS 7.5
CVE-2020-28481
MEDIUM
socket.io < 2.4.0 - Insecure Defaults via CORS Misconfiguration
CVSS 5.3
CVE-2020-6881
HIGH
ZTE ZXHN E8810/E8820/E8822 Firmware - Denial of Service via MQTT Message Handling
CVSS 7.5
CVE-2020-26251
MEDIUM
Open Zaak < 1.3.3 - Origin Validation Error via CORS Misconfiguration
CVSS 4.7
CVE-2020-15733
MEDIUM
Bitdefender Antivirus Plus < 25.0.7.29 - Origin Validation Error in SafePay
CVSS 6.5
CVE-2020-26234
MEDIUM
Opencast < 7.9 - Man-in-the-Middle Attack via Disabled HTTPS Hostname Verification
CVSS 4.8
CVE-2020-26253
MEDIUM
Kirby CMS <3.3.6 & Kirby Panel <2.5.14 - Info Disclosure
CVSS 6.8
CVE-2020-3864
HIGH
iCloud for Windows <7.17 - Info Disclosure
CVSS 7.8
CVE-2020-15682
MEDIUM
Firefox < 82.0 - Origin Spoofing via External Protocol Prompt
CVSS 6.5
CVE-2020-16952
HIGH
Microsoft SharePoint Server-Side Include and ViewState RCE
CVSS 8.6
CVE-2020-16951
HIGH
Microsoft SharePoint - Remote Code Execution via Application Package Source Markup
CVSS 8.6
CVE-2020-9903
HIGH
Safari < 13.1.2 - Password Suggestion for Wrong Domain
CVSS 7.5
CVE-2020-26527
CRITICAL
Damstra Smart Asset 2020.7 - Origin Validation Error via API Version Endpoint
CVSS 9.8
CVE-2020-15773
MEDIUM
Gradle Enterprise < 2020.2.4 - Unauthenticated Data Exposure via Export API
CVSS 6.5
CVE-2020-14519
HIGH
CodeMeter < 7.00 - Origin Validation Error via WebSockets API
CVSS 7.5
CVE-2020-15652
MEDIUM
Firefox < 79.0 and Firefox ESR < 68.11 - Origin Validation Error via JavaScript Worker Stack Trace
CVSS 6.5
CVE-2020-16168
MEDIUM
temi_firmware < 1.3.7931 - Origin Validation Error
CVSS 6.5
CVE-2020-1449
HIGH
Microsoft Project - Remote Code Execution via Unchecked File Source Markup
CVSS 7.8
CVE-2020-1408
HIGH
Microsoft Windows Font Library - Remote Code Execution
CVSS 8.8
Details
Vulnerabilities
692