The product does not properly verify that the source of data or communication is valid.
692 vulnerabilities with CWE-346
CVE-2020-15104
MEDIUM
Envoy <1.12.6-1.15.0 - Info Disclosure
CVSS 4.6
CVE-2020-14456
HIGH
Mattermost Desktop App < 4.4.0 - Origin Validation Error
CVSS 7.3
CVE-2020-12397
MEDIUM
Thunderbird <68.8.0 - Info Disclosure
CVSS 4.3
CVE-2020-11069
HIGH
TYPO3 CMS 9.0.0-9.5.16 and 10.0.0-10.4.1 - Same-Site Request Forgery via Malicious Uploaded Resource
CVSS 8.0
CVE-2020-11868
HIGH
ntp < 4.2.8p14 and 4.3.x < 4.3.100 - Unauthenticated Denial of Service via Spoofed Server Mode Packet
CVSS 7.5
CVE-2020-8984
HIGH
ZendTo < 5.22-2 Beta - IP Address Spoofing via X-Forwarded-For Header
CVSS 7.5
CVE-2020-8819
HIGH
CardGate Payments <3.1.15 - Auth Bypass
CVSS 8.1
CVE-2020-8818
HIGH
CardGate Payments <2.0.30 - Auth Bypass
CVSS 8.1
CVE-2020-0695
MEDIUM
Office Online Server - Spoofing via Origin Validation Error
CVSS 5.4
CVE-2020-0647
MEDIUM
Office Online Server - Spoofing via Origin Validation Error
CVSS 5.4
CVE-2019-25211
CRITICAL
Gin-Gonic CORS middleware <1.6.0 - SSRF
CVSS 9.1
CVE-2019-8754
MEDIUM
macOS < 10.15.1 - Cross-Origin Information Disclosure via Iframe Security Origin Tracking
CVSS 6.5
CVE-2019-4640
CRITICAL
IBM Security Secret Server <10.7 - Code Injection
CVSS 9.8
CVE-2019-16517
CRITICAL
ConnectWise Control <19.3.25270.7185 - SSRF
CVSS 9.8
CVE-2019-11762
MEDIUM
Firefox <70, Thunderbird <68.2, Firefox ESR <68.2 - CSRF
CVSS 6.1
CVE-2019-20329
HIGH
OpenLambda 2019-09-10 - DNS Rebinding Attack via REST API
CVSS 8.1
CVE-2019-5062
MEDIUM
hostapd 2.6 - Denial of Service via 802.11w Security State Handling
CVSS 6.5
CVE-2019-13740
MEDIUM
Google Chrome < 79.0.3945.79 - Domain Spoofing via Sharing Security UI
CVSS 6.5
CVE-2019-19545
MEDIUM
Norton Password Manager <6.6.2.5 - CSRF
CVSS 6.3
CVE-2019-18381
MEDIUM
Norton Password Manager < 6.6.2.5 - Origin Validation Error
CVSS 6.3
CVE-2019-19019
HIGH
TitanHQ WebTitan < 5.18 - Remote Code Execution via Hotfix Download Mechanism
CVSS 7.5
CVE-2019-5227
MEDIUM
Huawei P30/P30 Pro/Mate 20 < ELLE-AL00B 9.1.0.193(C00E190R2P1) - Ve...
CVSS 5.5
CVE-2019-5226
MEDIUM
Huawei P30/P30 Pro/Mate 20 < ELLE-AL00B 9.1.0.193(C00E190R2P1) - Ve...
CVSS 5.5
CVE-2019-13664
MEDIUM
Google Chrome < 77.0.3865.75 - Content Security Policy Bypass via Crafted HTML Page
CVSS 6.5
CVE-2019-1447
MEDIUM
Office Online Server - Spoofing via Origin Validation Error
CVSS 5.4
Details
Vulnerabilities
692