共收录 2014 条相关情报。
← 返回所有主题CVE-2026-115752
Signal K Server from 2.28.0-beta.2 before 2.34.0 contains a server-side request forgery vulnerability in the App Store i
CVE-2026-115729
@pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerability that allows attackers to byp
CVE-2026-19678
A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase For
CVE-2026-108456
Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a networ
CVE-2026-114620
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's RFC 9101 JWTAuthent
CVE-2026-79880
A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges
CVE-2026-114609
fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's shared image loader automatically dereferences attac
CVE-2026-108360
PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8,
CVE-2026-115411
crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where isPrivate
CVE-2026-114730
Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass
CVE-2026-87953
Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forge
CVE-2026-87953
Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forge
CVE-2026-114634
WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL() be
CVE-2026-114634
WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL() be
CVE-2026-87953
Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forge
CVE-2026-114374
A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unknown function of the file inte
CVE-2026-114362
A flaw has been found in HarnessRouter up to 0.31.12. This impacts an unknown function of the file gateway/app.py of the
CVE-2026-62197
### Summary Browser CDP discovery could accept blocked WebSocket URLs. In affected versions, a lower-trust caller or co
CVE-2026-114374
A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unknown function of the file inte
CVE-2026-114362
A flaw has been found in HarnessRouter up to 0.31.12. This impacts an unknown function of the file gateway/app.py of the