#cwe-918

共收录 2014 条相关情报。

漏洞预警2026-09-30 发布INFO

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery. Kiteworks Email Protection Gateway performed server-side fetches of URLs co...

CVE-2026-102095

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery. Kiteworks Email Pr

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-30 发布INFO

Kiteworks Secure Data Forms before version 9.5.0 is vulnerable to Server-Side Request Forgery that could allow an unauthenticated, remote attacker to make the server issue arbit...

CVE-2026-102091

Kiteworks Secure Data Forms before version 9.5.0 is vulnerable to Server-Side Request Forgery that could allow an unauth

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-30 发布INFO

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a har...

CVE-2023-54402

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthentic

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-09-29 发布INFO

PyJWT: PyJWKClient follows redirects when fetching JWKS

CVE-2026-102267

### Summary PyJWT 2.13.0 `PyJWKClient` followed HTTP redirects while fetching a JWKS, without validating the redirect d

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-200 #cwe-345 #cwe-918 #severity:high

漏洞预警2026-09-29 发布INFO

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the...

CVE-2026-102904

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit

历史摘要 · 未重新核验 · NVD

#cve #cwe-88 #cwe-209 #cwe-918

漏洞预警2026-09-29 发布INFO

ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download_file and scrape_web agent tools. Authenticated users can bypass hostname valida...

CVE-2026-102879

ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download_file and scrape_web ag

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-29 发布INFO

Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL validation for webhooks and custom OAuth provider endpoint...

CVE-2026-102877

Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL v

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-29 发布INFO

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This ...

CVE-2026-100297

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-29 发布INFO

In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply. Validation only covers the parse and the non-zero values, thus a malicious s...

CVE-2026-102722

In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply. Validation only cov

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-09-29 发布INFO

CVE-2026-102722

In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply. Validation only cov

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

漏洞预警2026-09-29 发布INFO

Joomla! Core - [20260909] - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - URLs used for serverside requests were improperly validated, lead...

CVE-2026-92222

Joomla! Core - [20260909] - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - URLs use

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-09-29 发布INFO

A security flaw has been discovered in MODSetter SurfSense up to 0.0.36. Impacted is an unknown...

CVE-2026-102244

A security flaw has been discovered in MODSetter SurfSense up to 0.0.36. Impacted is an unknown function of the file sur

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-918 #severity:low

漏洞预警2026-09-29 发布INFO

A security flaw has been discovered in MODSetter SurfSense up to 0.0.36. Impacted is an unknown function of the file surfsense_backend/app/routes/editor_routes.py of the compone...

CVE-2026-102244

A security flaw has been discovered in MODSetter SurfSense up to 0.0.36. Impacted is an unknown function of the file sur

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-28 发布INFO

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because redirect destinations are not revalidated against the JWKS t...

CVE-2026-102267

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because red

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-345 #cwe-918

安全公告2026-09-28 发布INFO

ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts

CVE-2026-101913

### Summary `Address6.isLinkLocal()` recognizes `fe80::/64` rather than `fe80::/10`. Link-local unicast is the whole `/

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-697 #cwe-918 #severity:medium

安全公告2026-09-28 发布INFO

ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass

CVE-2026-101910

### Summary No classifier on `Address6` recognizes the NAT64 local-use range `64:ff9b:1::/48` (RFC 8215). `isPrivate()`

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-918 #severity:medium

安全公告2026-09-28 发布INFO

jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserialization

CVE-2026-77310

### Summary CVE-2026-54514 (GHSA-hgj6-7826-r7m5) fixed an eager-DNS-resolution / SSRF issue in jackson-databind's deseri

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-918 #severity:medium

漏洞预警2026-09-28 发布INFO

Stringer is a self-hosted, anti-social RSS reader. Prior to commit 75cb095, an unrestricted Server-Side Request Forgery (SSRF) vulnerability allows any authenticated user to for...

CVE-2026-55160

Stringer is a self-hosted, anti-social RSS reader. Prior to commit 75cb095, an unrestricted Server-Side Request Forgery

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-09-28 发布INFO

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.5.1, the Address6 isLinkLocal method in src/ipv6.ts recognizes only fe80:...

CVE-2026-101913

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.5.1, the Address

历史摘要 · 未重新核验 · NVD

#cve #cwe-697 #cwe-918

漏洞预警2026-09-28 发布INFO

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.2.0 until 10.5.1, the Address6 isPrivate classifier in src/ipv6.ts does not r...

CVE-2026-101910

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.2.0 until 10.5.1, th

历史摘要 · 未重新核验 · NVD

#cve #cwe-918