The product does not properly verify that the source of data or communication is valid.
692 vulnerabilities with CWE-346
CVE-2019-1445
MEDIUM
Office Online Server - Spoofing via Origin Validation Error
CVSS 5.4
CVE-2019-1442
MEDIUM
Microsoft SharePoint Server - Security Feature Bypass via URL Validation Error
CVSS 5.5
CVE-2019-1413
MEDIUM
Microsoft Edge - Security Feature Bypass via Extension Request Handling
CVSS 4.3
CVE-2019-15020
CRITICAL
Zingbox Inspector < 1.293 - Command Injection via Invalid Software Update Image
CVSS 9.8
CVE-2019-3980
CRITICAL
Solarwinds Dameware Mini Remote Control 12.1.0.89 - Unauthenticated Remote Code Execution via Smart Card Authentication
CVSS 9.8
CVE-2019-16275
MEDIUM
hostapd <2.10, wpa_supplicant <2.10 - DoS
CVSS 6.5
CVE-2019-8069
CRITICAL
Adobe Flash Player < 32.0.0.238 - Same Origin Method Execution
CVSS 9.8
CVE-2019-1235
HIGH
Windows Text Service Framework - Elevation of Privilege via Unvalidated Input
CVSS 7.8
CVE-2019-16237
HIGH
dino < 0.1.0 - Origin Validation Error in MAM Message Source Check
CVSS 7.5
CVE-2019-16235
HIGH
dino < 0.1.0 - Origin Validation Error in Carbons Message Handling
CVSS 7.5
CVE-2019-11777
HIGH
Eclipse Paho Java client lib <1.2.0 - SSRF
CVSS 7.5
CVE-2019-5036
HIGH
Nest Cam IQ Indoor Firmware 4620002 - Denial of Service via Weave Error Reporting
CVSS 7.5
CVE-2019-9817
MEDIUM
Thunderbird <60.7 & Firefox <67 - SSRF
CVSS 5.3
CVE-2019-11723
HIGH
Firefox < 68.0 - Origin Validation Error during Add-on Installation
CVSS 7.5
CVE-2019-5834
MEDIUM
Google Chrome < 75.0.3770.80 - Domain Spoofing via Crafted HTML Page
CVSS 6.5
CVE-2019-8282
MEDIUM
Gemalto Sentinel LDK < 7.92 - Cleartext HTTP Communication with Language Pack Server
CVSS 5.3
CVE-2019-9808
MEDIUM
Firefox < 66.0 - Origin Validation Error in WebRTC Permission Request
CVSS 5.3
CVE-2019-9803
HIGH
Firefox < 66.0 - Origin Validation Error via Upgrade-Insecure-Requests Bypass
CVSS 7.4
CVE-2019-9797
MEDIUM
Firefox < 66.0 - Same-Origin Policy Bypass via createImageBitmap and Canvas Rendering
CVSS 5.3
CVE-2019-9499
HIGH
hostapd and wpa_supplicant < 2.4 - Origin Validation Error in EAP-PWD Commit
CVSS 8.1
CVE-2019-9498
HIGH
hostapd and wpa_supplicant <= 2.4 - Authentication Bypass via Invalid EAP-PWD Scalar/Element Values
CVSS 8.1
CVE-2019-9764
HIGH
HashiCorp Consul <1.4.3 - Info Disclosure
CVSS 7.4
CVE-2019-5773
MEDIUM
Google Chrome < 72.0.3626.81 - Origin Validation Error in IndexedDB
CVSS 6.5
CVE-2019-7399
HIGH
Amazon Fire OS <5.3.6.4 - Info Disclosure
CVSS 7.4
CVE-2018-5409
CRITICAL
PrinterLogic Print Management <18.3.1.96 - Code Injection
CVSS 9.8
Details
Vulnerabilities
692