#cwe-918
共收录 2015 条相关情报。
← 返回所有主题 漏洞预警2026-09-02 发布INFO
CVE-2026-55421
Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 00b7c3c, the endpo
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-02 发布INFO
CVE-2026-66842
BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts th
历史摘要 · 未重新核验 · NVD
安全公告2026-09-02 发布INFO
CVE-2026-75975
### Impact
`fast-uri` does not validate the complete RFC 3986 grammar for bracketed IPv6 literals, so a malformed liter
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-02 发布INFO
CVE-2026-75899
### Impact
`fast-uri` decodes a hostname's percent escapes twice in a single `normalize()` or `resolve()` call: once du
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-02 发布INFO
CVE-2026-63311
There is an SSRF vulnerability in NLTK 3.9.4's network URL validation. The validate_network_url() function in nltk/paths
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-02 发布INFO
CVE-2026-73474
Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This
历史摘要 · 未重新核验 · NVD
安全公告2026-09-02 发布INFO
CVE-2026-73474
Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-09-02 发布INFO
CVE-2026-84772
Editor Server Side Request Forgery (SSRF) in Broken Link Checker <= 2.4.14 versions.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-02 发布INFO
CVE-2026-84175
In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs
历史摘要 · 未重新核验 · NVD
安全公告2026-09-02 发布INFO
CVE-2026-84175
In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-09-02 发布INFO
CVE-2026-84697
Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/614
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-02 发布INFO
CVE-2026-84697
Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/614
历史摘要 · 未重新核验 · NVD
安全公告2026-09-02 发布INFO
CVE-2026-84697
Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/614
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-09-02 发布INFO
CVE-2026-18730
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenti
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-02 发布INFO
CVE-2026-76851
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code e
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-01 发布INFO
CVE-2026-83548
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-01 发布INFO
CVE-2026-76851
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code e
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-01 发布INFO
CVE-2026-18730
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenti
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-01 发布INFO
CVE-2026-73757
A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-01 发布INFO
CVE-2026-8712
Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with ne
历史摘要 · 未重新核验 · NVD