CWE-942

Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.

A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could a

HCL DRYiCE Lucy (now AEX) is affected by a Cross Origin Resource Sharing (CORS) vulnerability. The mobile app is vulnera

HyperView Geoportal Toolkit in versions lower than 8.5.0 does not restrict cross-domain requests when fetching remote co

IBM PowerSC 1.3, 2.0, and 2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privi

IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arb

Microsoft Edge for Android Information Disclosure Vulnerability

vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Le

In Gliffy Online an insecure configuration was discovered in versions before 4.14.0-6. Reported by Alpha Inferno PVT LTD

PlexRipper is a cross-platform media downloader for Plex. PlexRipper’s open CORS policy allows attackers to gain sensiti

Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, a

Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure.

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). When accessing the Information Server from

Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS).

Sensitive information disclosure due to CORS misconfiguration. The following products are affected: Acronis Cyber Infras

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versi

Sentry is an error tracking and performance monitoring platform. Starting in version 23.6.0 and prior to version 23.6.2,

Dell SupportAssist for Home PCs (version 3.11.2 and prior) contain Overly Permissive Cross-domain Whitelist vulnerabili

Connectwise Control 22.8.10013.8329 is vulnerable to Cross Origin Resource Sharing (CORS). The vendor's position is that

A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.

A malicious website could have learned the size of a cross-origin resource that supported Range requests. This vulnerabi

In Directus before 9.7.0, the default settings of CORS_ORIGIN and CORS_ENABLED are true.

Cross-origin resource sharing (CORS) enables browsers to perform cross domain requests in a controlled manner. This requ

In Eclipse Theia 0.3.9 to 1.8.1, the "mini-browser" extension allows a user to preview HTML files in an iframe inside th

It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker