#cwe-918

共收录 2015 条相关情报。

← 返回所有主题
漏洞预警2026-09-02 发布INFO

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 00b7c3c, the endpoint accepts user-supplied files[].url, performs a server-...

CVE-2026-55421

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 00b7c3c, the endpo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed request to Traffic Management User I...

CVE-2026-66842

BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts th

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization

CVE-2026-75975

### Impact `fast-uri` does not validate the complete RFC 3986 grammar for bracketed IPv6 literals, so a malformed liter

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding

CVE-2026-75899

### Impact `fast-uri` decodes a hostname's percent escapes twice in a single `normalize()` or `resolve()` call: once du

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure

CVE-2026-63311

There is an SSRF vulnerability in NLTK 3.9.4's network URL validation. The validate_network_url() function in nltk/paths

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-02 发布INFO

Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This issue affects Entity Share Websub versions: from 0.0.0 to...

CVE-2026-73474

Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

Entity Share Websub - Moderately critical - Server-side request forgery (SSRF) - SA-CONTRIB-2026-097

CVE-2026-73474

Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-02 发布INFO

Editor Server Side Request Forgery (SSRF) in Broken Link Checker <= 2.4.14 versions.

CVE-2026-84772

Editor Server Side Request Forgery (SSRF) in Broken Link Checker <= 2.4.14 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布INFO

In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing...

CVE-2026-84175

In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

CVE-2026-84175

CVE-2026-84175

In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-02 发布INFO

Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129...

CVE-2026-84697

Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/614

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-02 发布INFO

Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/6145 IPv4-translated IPv6 prefix, allowing server-side reque...

CVE-2026-84697

Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/614

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

Mailpit SSRF Deny List Bypass via Azure Metadata and IPv6 Prefix

CVE-2026-84697

Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/614

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-02 发布INFO

A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server...

CVE-2026-18730

A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenti

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server...

CVE-2026-76851

A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code e

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-01 发布INFO

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could ...

CVE-2026-83548

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation ...

CVE-2026-76851

A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause the Manage API to send crafted ou...

CVE-2026-18730

A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery (SSRF) attack. A successful...

CVE-2026-73757

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary t...

CVE-2026-8712

Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with ne

历史摘要 · 未重新核验 · NVD