Cross-Site Request Forgery

Every one of the 24 is a mark on the map. Named now: 1 to 24, most at risk first.

1. Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to o…CVE-2007-0044Adobe · 57% likely

   CWE-352

2. Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before…CVE-2014-4671Adobe · 22% likely

   CWE-352

3. Adobe Flash Player 8.0.34.0 and earlier insufficiently validates HTTP Referer headers, which might allow remote attackers to conduct a CSRF attack via a crafted SWF file.CVE-2007-3457Adobe · 6.8% likely

   CWE-352

4. Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to perform Cross-Site Request Forgery (CSRF) style attacks by usi…CVE-2008-1654Adobe · 4.8% likely

   CWE-352

5. Adobe Experience Manager versions 6.2 and earlier have a vulnerability that could be used in Cross-Site Request Forgery attacks.CVE-2016-7885Adobe · 3.4% likely

   CWE-352

6. Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14…CVE-2014-5333Adobe · 3.3% likely

   CWE-352

7. Adobe Experience Manager version 6.4 and ealier have a Cross-Site Request Forgery vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the cont…CVE-2019-7953Adobe · 2.7% likely

   CWE-352

8. Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update…CVE-2014-0570Adobe · 2.4% likely

   CWE-352

9. Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a cross-site request forgery vulnerability. Successful exploitation could lead to sensitive information disclosure.CVE-2019-8234Adobe · 2.1% likely

   CWE-352

10. Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and befor…CVE-2015-3096Adobe · 2.0% likely

    CWE-352

11. Cross-site request forgery (CSRF) vulnerability in Adobe Connect before 9.5.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.CVE-2016-0948Adobe · 1.9% likely

    CWE-352

12. Magento Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Data ModificationCVE-2021-21027Adobe · CVSS 4.3 · 1.6% likely

    CWE-352

13. Adobe Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Cart AdditionCVE-2021-39864Adobe · CVSS 6.5 · 1.6% likely

    CWE-352

14. Adobe Experience Manager Forms JEE | Cross-Site Request Forgery (CSRF) (CWE-352)CVE-2026-75743Adobe · CVSS 7.1 · 1.5% likely

    CWE-352

15. Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authentication of unspecified victims via unkn…CVE-2011-0629Adobe · 1.4% likely

    CWE-352

16. Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)CVE-2025-27189Adobe · CVSS 4.3 · 1.0% likely

    CWE-352

17. Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)CVE-2025-49555Adobe · CVSS 8.1 · 1.0% likely

    CWE-352

18. A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can craft a malicious CSRF payload that…CVE-2019-8109Adobe Systems Incorporated · 0.9% likely

    CWE-352

19. [Spain] CSRF to delete Requisition Lists at Adobe CommerceCVE-2024-20718Adobe · CVSS 4.3 · 0.8% likely

    CWE-352

20. Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request. This could be exploited by an attacker with access to network traffic to p…CVE-2019-8155Adobe Systems Incorporated · 0.5% likely

    CWE-352

21. Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)CVE-2024-39410Adobe · CVSS 4.3 · 0.5% likely

    CWE-352

22. Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)CVE-2024-39409Adobe · CVSS 4.3 · 0.5% likely

    CWE-352

23. Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)CVE-2024-39408Adobe · CVSS 4.3 · 0.5% likely

    CWE-352

24. Dreamweaver Desktop | Cross-Site Request Forgery (CSRF) (CWE-352)CVE-2025-54256Adobe · CVSS 8.6 · 0.2% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.