CVE Vulnerability

CWE-352

CVE-2019-6510

by

An issue was discovered in creditease-sec insight through 2018-09-11. user_delete in srcpm/app/admin/views.py allows CSRF.

CVE-2019-6282

by

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wireless Security Password.

CVE-2019-6294

by

An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent URI.

CVE-2019-6319

by

HP DeskJet 3630 All-in-One Printers models F5S43A – F5S57A, K4T93A – K4T99C, K4U00B – K4U03B, and V3F21A – V3F22A (firmware version SWP1FN1912BR or higher) have a Cross-Site Request Forgery (CSRF) vulnerability that could lead to a denial of service (DOS) or device misconfiguration.

CVE-2019-6320

by

Certain HP DeskJet 3630 All-in-One Printers models F5S43A – F5S57A, K4T93A – K4T99C, K4U00B – K4U03B, and V3F21A – V3F22A (firmware version SWP1FN1912BR or higher) have a Cross-Site Request Forgery (CSRF) vulnerability that could lead to a denial of service (DOS) or device misconfiguration.

CVE-2019-6325

by

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an embedded web server that is potentially vulnerable to Cross-site Request Forgery.