Cross-Site Request Forgery

Every one of the 29 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to hijack the authentication of a…CVE-2014-100005D-Link · CVSS 8 · 43% likely

   CWE-352

2. D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. Thi…CVE-2017-7852Dlink · 4.3% likely

   CWE-352

3. Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to (1) change the admin password, (2) reb…CVE-2017-5633D-Link · 4.0% likely

   CWE-352

4. D-Link DIR-100 4.03B07: cli.cgi CSRFCVE-2013-7053Dlink · 3.4% likely

   CWE-352

5. Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09_BETA allow remote attackers to hijack the authentic…CVE-2015-5999Dlink · 3.2% likely

   CWE-352

6. D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery (CSRF) vulnerability. This enables an attacker to perform an unwanted action on a wireless router for wh…CVE-2017-7398D-Link · 3.0% likely

   CWE-352

7. Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_1.00 devices allows remote attackers to change the DNS or firewall configuration or any password.CVE-2017-6411Dlink · 3.0% likely

   CWE-352

8. Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote attackers to hijack the authentication of administrators for…CVE-2014-3136Dlink · 2.9% likely

   CWE-352

9. D-Link DCS-936L devices with firmware before 1.05.07 have an inadequate CSRF protection mechanism that requires the device's IP address to be a substring of the HTTP Referer heade…CVE-2017-7851D-Link · 2.5% likely

   CWE-352

10. Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attackers to hijack the authentication of administrators for requ…CVE-2012-1308Dlink · 2.4% likely

    CWE-352

11. An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of changing the administrative password for the web management interface. It see…CVE-2017-8407Dlink · 1.2% likely

    CWE-352

12. An issue was discovered on D-Link DCS-1130 devices. The device provides a crossdomain.xml file with no restrictions on who can access the webserver. This allows an hosted flash fi…CVE-2017-8406Dlink · 1.2% likely

    CWE-352

13. Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DSL-2740B Gateway with firmware EU_1.00 allow remote attackers to hijack the authentication of administrators…CVE-2013-5730Dlink · 1.2% likely

    CWE-352

14. Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR865L router (Rev. A1) with firmware before 1.05b07 allow remote attackers to hijack the authentication of a…CVE-2013-3095Dlink · 1.2% likely

    CWE-352

15. Cross-site request forgery (CSRF) vulnerability in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to hijack the authentication of arbitrary users for…CVE-2015-0151Dlink · 1.1% likely

    CWE-352

16. Cross-site request forgery (CSRF) vulnerability in setup/security.cgi in D-Link DCS-900, DCS-2000, and DCS-5300 allows remote attackers to hijack the authentication of administrat…CVE-2012-5319Dlink · 1.1% likely

    CWE-352

17. D-Link DIR-655 C devices before 3.02B05 BETA03 allow CSRF for the entire management console.CVE-2019-13563Dlink · 1.0% likely

    CWE-352

18. Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DSL-6740U gateway (Rev. H1) allow remote attackers to hijack the authentication of administrators for requ…CVE-2013-6811D-Link · 1.0% likely

    CWE-352

19. Cross-site request forgery (CSRF) vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote attackers to hijack the authentication of unspecified victims via u…CVE-2015-2048Dlink · 0.9% likely

    CWE-352

20. CSRF exists on D-Link DIR-868L devices, leading to (for example) a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components.CVE-2018-10957Dlink · 0.8% likely

    CWE-352

21. Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 router with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspeci…CVE-2014-10027Dlink · 0.8% likely

    CWE-352

22. Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified us…CVE-2014-10025Dlink · 0.8% likely

    CWE-352

23. D-Link DIR-865L Ax 1.20B01 Beta devices allow CSRF.CVE-2020-13786Dlink · 0.7% likely

    CWE-352

24. CSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01_beta_20170306. This can be used to bypass authentication and insert XSS sequences or possibly have unspecified oth…CVE-2017-5874D-Link · 0.7% likely

    CWE-352

25. Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP 1150 with firmware 1.2.94 allow remote attackers to hijack the authentication of administrators for reques…CVE-2014-3760Dlink · 0.7% likely

    CWE-352

26. Cross-site request forgery (CSRF) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to hijack the authentication of adminis…CVE-2013-7320D-Link · 0.7% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.