CWE-346.

Origin validation error in Trend Micro, Inc. Trend Micro Apex One and others

• Trend Micro, Inc. Trend Micro Apex One
• Trend Micro, Inc. Trend Micro Apex One as a Service
• CWE-346

In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g., an adversary who controls the local W…

• CWE-346

BIG-IP APM browser network access VPN client vulnerability

• F5 BIG-IP Edge Client
• F5 BIG-IP
• CWE-346

Origin validation error in Hitachi Energy SDM600

• Hitachi Energy SDM600
• CWE-346

myQNAPcloud Link

• QNAP Systems Inc. myQNAPcloud Link
• Authentication bypass
• CWE-346

Keycloak's unvalidated cross-origin messages in checkLoginIframe leads to DDoS

• CWE-346

<22.0.10 || >=23.0.0, <24.0.3 · fixed in 22.0.10, 24.0.3

Keycloak path traversal vulnerability in the redirect validation

• Open redirect
• CWE-346

<22.0.10 || >=23.0.0, <24.0.3 · fixed in 22.0.10, 24.0.3

Ollama DNS rebinding vulnerability

• Authentication bypass
• CWE-346

<0.1.29 · fixed in 0.1.29

Truncated port name

• Brocade Fabric OS
• CWE-346

The Kossy module before 0.60 for Perl allows JSON hijacking because of X-Requested-With mishandling.

• CWE-346

Ovn: insufficient validation of bfd packets may lead to denial of service

• Fast Datapath for Red Hat Enterprise Linux 8
• Fast Datapath for Red Hat Enterprise Linux 9
• CWE-346

PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series

• PHOENIX CONTACT CHARX SEC-3000
• PHOENIX CONTACT CHARX SEC-3050
• CWE-346

IBM Cognos Analytics cross-origin resource sharing

• IBM Cognos Analytics
• CWE-346

Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials

• CWE-346
• CWE-942

<2.52.1 · fixed in 2.52.1

MeshCentral cross-site websocket hijacking (CSWSH) vulnerability

• CWE-346

<1.1.21 · fixed in 1.1.21

HIMA: Origin Validation Error in multiple products

• HIMA F30 03X YY (COM)
• HIMA F30 03X YY (CPU)
• CWE-346

Classic builder cache poisoning

• CWE-345
• CWE-346

<24.0.9 || >=25.0.0, <25.0.2 · fixed in 24.0.9, 25.0.2

Cross-site WebSocket hijacking vulnerability in the Jenkins CLI

• CWE-346

>=2.217, <2.426.3 || >=2.427, <2.442 · fixed in 2.426.3, 2.442

Origin validation error in Google Chrome

• Google Chrome
• CWE-346

Origin validation error in Trend Micro, Inc. Trend Micro Apex One and others

• Trend Micro, Inc. Trend Micro Apex One
• Trend Micro, Inc. Trend Micro Apex One as a Service
• CWE-346

Origin validation error in Trend Micro, Inc. Trend Micro Apex One and others

• Trend Micro, Inc. Trend Micro Apex One
• Trend Micro, Inc. Trend Micro Apex One as a Service
• CWE-346

Origin validation error in Trend Micro, Inc. Trend Micro Apex One and others

• Trend Micro, Inc. Trend Micro Apex One
• Trend Micro, Inc. Trend Micro Apex One as a Service
• CWE-346

Origin validation error in Trend Micro, Inc. Trend Micro Apex One and others

• Trend Micro, Inc. Trend Micro Apex One
• Trend Micro, Inc. Trend Micro Apex One as a Service
• CWE-346

Origin validation error in Trend Micro, Inc. Trend Micro Apex One and others

• Trend Micro, Inc. Trend Micro Apex One
• Trend Micro, Inc. Trend Micro Apex One as a Service
• CWE-346

Origin validation error in Trend Micro, Inc. Trend Micro Apex One and others

• Trend Micro, Inc. Trend Micro Apex One
• Trend Micro, Inc. Trend Micro Apex One as a Service
• CWE-346

Origin validation error in Trend Micro, Inc. Trend Micro Apex One and others

• Trend Micro, Inc. Trend Micro Apex One
• Trend Micro, Inc. Trend Micro Apex One as a Service
• CWE-346

Origin validation error in Trend Micro, Inc. Trend Micro Apex One and others

• Trend Micro, Inc. Trend Micro Apex One
• Trend Micro, Inc. Trend Micro Apex One as a Service
• CWE-346

Origin validation error in Mozilla Firefox and others

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Origin validation error in Cisco Adaptive Security Appliance (ASA) Software and others

• Cisco Adaptive Security Appliance (ASA) Software
• Cisco Firepower Threat Defense Software
• CWE-346

Overly permissive origin policy

• CWE-346

<5.0.0 · fixed in 5.0.0

PAC Files Exposed to Internet Websites

• Zscaler Client Connector
• CWE-346

Origin validation error in Google Chrome

• Google Chrome
• CWE-346

Client IPC validation bypass

• Zscaler Client Connector
• CWE-346

Privilege Escalation Using PID Reuse in ZCC macOS

• Zscaler Client Connector
• CWE-346

Untrusted Search Path While Executing REG DELETE by Uninstaller

• Zscaler Client Connector
• CWE-346

Junos OS Evolved: PTX10001, PTX10004, PTX10008, PTX10016: MAC address validation bypass vulnerability

• Juniper Networks Junos OS Evolved
• CWE-346

Junos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerability

• Juniper Networks Junos OS Evolved
• CWE-346

Origin Check Bypass

• PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH cashIT! - serving solutions.
• CWE-346

Origin validation error in Google Chrome

• Google Chrome
• CWE-346

Unintentional leakage of private information via cross-origin websocket session hijacking

• CWE-346
• CWE-1385

<2.8.13 || >=3.0.0, <3.1.3 · fixed in 2.8.13, 3.1.3

WebSockets accept connections from HTTPS origin

• Mattermost
• CWE-346

Origin validation error in Mozilla Firefox

• Mozilla Firefox
• CWE-346

D-Link DSL-224 firmware version 3.0.10 post authentication command execution

• D-Link DSL-224 firmware version 3.0.10
• CWE-346

Origin validation error in Trend Micro, Inc. Trend Micro Apex One

• Trend Micro, Inc. Trend Micro Apex One
• CWE-346

Origin validation error in Apple macOS and others

• Apple macOS
• Apple watchOS
• CWE-346

Origin validation error in Apple macOS

• Apple macOS
• CWE-346

Origin validation error in Apple macOS

• Apple macOS
• CWE-346

An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted GET request.

• CWE-346

In Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS, insecure SCPI interface discloses web password.

• CWE-346

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B.

• CWE-346

Rockwell Automation FactoryTalk System Services Vulnerable to Sensitive Information Disclosure

• Rockwell Automation FactoryTalk System Services
• CWE-346

An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files.

• CWE-346

An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows a local attacker to cause a denial of service via the SharedPreference files.

• CWE-346

An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files.

• CWE-346

Incorrect access control in the administrative functionalities of BES--6024PB-I50H1 VideoPlayTool v2.0.1.0 allow attackers to execute arbitrary administrative commands via a crafted payload sent to t…

• CWE-346

Origin validation error in GitLab

• GitLab
• CWE-346

Origin validation error in Mozilla Firefox and others

• Mozilla Firefox
• Mozilla Firefox ESR
• CWE-346

An issue in South River Technologies TitanFTP Before v2.0.1.2102 allows attackers with low-level privileges to perform Administrative actions by sending requests to the user server.

• CWE-346

Incorrect access control in luowice v3.5.18 allows attackers to access cloud source code information via modification fo the Verify parameter in a warning message.

• CWE-346

Prestashop salesbooster <= 1.10.4 is vulnerable to Incorrect Access Control via modules/salesbooster/downloads/download.php.

• CWE-346