Vulnerability database

4 results

• Jul 28, 2025PaperCut NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityCVE-2023-2533 · Other software · PaperCut · reported by help@fluidattacks.comExploitedHigh 8.4

  PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code.

  Product

  NG/MF

  On CISA’s list since

  Jul 28, 2025 (federal fix deadline Aug 18, 2025)

  What to do

  Attackers are using this now. Install PaperCut’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

  Full record and what to do →NVD recordCISA catalogfluidattacks.compapercut.com

• May 16, 2024D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) VulnerabilityCVE-2014-100005 · Network & remote access · D-Link · reported by MITREExploitedHigh 8

  D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session.

  Product

  DIR-600 Router

  On CISA’s list since

  May 16, 2024 (federal fix deadline Jun 6, 2024)

  What to do

  Attackers are using this now. Install D-Link’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

  Full record and what to do →NVD recordCISA catalogresources.infosecinstitute.comsecunia.com

• May 12, 2023Multiple Ruckus Wireless Products CSRF and RCE VulnerabilityCVE-2023-25717 · Other software · Ruckus Wireless · reported by MITREExploitedCritical 9.8

  Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs.

  Product

  Multiple Products

  On CISA’s list since

  May 12, 2023 (federal fix deadline Jun 2, 2023)

  What to do

  Attackers are using this now. Install Ruckus Wireless’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

  Full record and what to do →NVD recordCISA catalogcybir.comsupport.ruckuswireless.com

• Nov 3, 2021Sumavision EMR Cross-Site Request Forgery (CSRF) VulnerabilityCVE-2020-10181 · Other software · Sumavision · reported by MITREExploitedCritical 9.8

  Sumavision Enhanced Multimedia Router (EMR) contains a cross-site request forgery (CSRF) vulnerability allowing the creation of users with elevated privileges as administrator on a device.

  Product

  Enhanced Multimedia Router (EMR)

  On CISA’s list since

  Nov 3, 2021 (federal fix deadline May 3, 2022)

  What to do

  Attackers are using this now. Install Sumavision’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

  Full record and what to do →NVD recordCISA catalogpacketstormsecurity.comgithub.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.