#cwe-918

共收录 2014 条相关情报。

← 返回所有主题
漏洞预警2026-10-01 发布INFO

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's SSRF guard resolves a host with an IPv4...

CVE-2026-55232

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxy

CVE-2026-55232

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-01 发布INFO

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

CVE-2026-102904

JupyterLab's PyPI extension manager runs `python -m pip uninstall` with the extension name taken from the request body.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-01 发布INFO

Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts ...

CVE-2026-103757

Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbo...

CVE-2026-103291

Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetchi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that allows staff users to probe internal hosts. Attackers with s...

CVE-2026-103287

Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that all

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Server-Side Request Forgery (SSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-S...

CVE-2026-103082

Server-Side Request Forgery (SSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit a

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation

CVE-2026-103757

Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUr

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-01 发布INFO

Ghost 3.20.2 before 6.51.0 SSRF via image-size fetch

CVE-2026-103291

Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetchi

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-01 发布INFO

Ghost 1.18.0 before 6.27.0 Server-Side Request Forgery via Webhook

CVE-2026-103287

Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that all

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-01 发布INFO

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration

CVE-2026-103497

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

A flaw has been found in formtools.org Form Tools up to 3.1.1. Impacted is the function smart_fill of the file /global/code/actions.php of the component AJAX Endpoint. This mani...

CVE-2026-103542

A flaw has been found in formtools.org Form Tools up to 3.1.1. Impacted is the function smart_fill of the file /global/c

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

formtools.org Form Tools AJAX Endpoint actions.php smart_fill server-side request forgery

CVE-2026-103542

A flaw has been found in formtools.org Form Tools up to 3.1.1. Impacted is the function smart_fill of the file /global/c

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-01 发布INFO

A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoi...

CVE-2026-103530

A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src

历史摘要 · 未重新核验 · NVD

安全公告2026-09-30 发布INFO

decolua 9Router Search Endpoint ssrfGuard.js fetch server-side request forgery

CVE-2026-103530

A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-30 发布INFO

An authenticated administrator on a node with an optional, separately licensed gateway role enabled could supply a connector URL that the server retrieved without sufficient val...

CVE-2026-102138

An authenticated administrator on a node with an optional, separately licensed gateway role enabled could supply a conne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Pro...

CVE-2026-102105

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-si

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Pro...

CVE-2026-102104

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-si

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Pro...

CVE-2026-102103

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-si

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-30 发布INFO

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Pro...

CVE-2026-102102

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-si

历史摘要 · 未重新核验 · NVD