#cwe-918

共收录 2023 条相关情报。

← 返回所有主题
漏洞预警2026-08-07 发布INFO

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's `/$result...

CVE-2026-47659

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email...

CVE-2026-17597

Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification f

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification feature. A user holding the nexus:settings:update permissi...

CVE-2026-17597

Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron1...

CVE-2026-15570

An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE245

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality (“!ArcEntryMove”) accepts an arbitrary path, which can be set to network locations using UNC paths (e.g....

CVE-2026-54207

Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality (“!ArcEntryMove”) accepts an arbitrary path, whi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, which can be set to network locations using UNC paths (e.g...

CVE-2026-54206

Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, wh

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality (//ServerClient_celink.htm) accepts a “pathname” parameter, which can be set to network locations using ...

CVE-2026-54205

Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality (//ServerClient_celink.htm) accepts a “pathname”

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” parameter, which can be set to network locations using UNC paths (e.g., “\\Server\Sha...

CVE-2026-54204

Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” parameter, which can be set t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Server-Side request forgery (SSRF) vulnerability in Revenue Administration Türkiye's E-Signature allows Server Side Request Forgery. This issue affects Türkiye's E-Signature: f...

CVE-2026-16027

Server-Side request forgery (SSRF) vulnerability in Revenue Administration Türkiye's E-Signature allows Server Side Requ

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker...

CVE-2026-70332

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing ov

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery...

CVE-2026-53983

Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-06 发布INFO

Fedify is a TypeScript library for building federated server apps powered by ActivityPub. From version 1.2.0 through the affected 1.9, 1.10, 2.0, 2.1, 2.2, and 2.3 maintenance l...

CVE-2026-62857

Fedify is a TypeScript library for building federated server apps powered by ActivityPub. From version 1.2.0 through the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticate...

CVE-2026-53983

Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, when VAPID delivery is enabled, the notification...

CVE-2026-45573

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.3

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTT...

CVE-2026-15732

A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functiona

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to make the server issue arbitrar...

CVE-2026-18359

Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through 26.04.1 allows a re

历史摘要 · 未重新核验 · NVD

安全公告2026-08-06 发布INFO

Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL

CVE-2026-53984 · CVE-2026-53985 · CVE-2026-53983

Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-06 发布INFO

A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead...

CVE-2026-19040

A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfresttoken` to attacker-controlled host if the victim is authen...

CVE-2026-12605

In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfrestt

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-06 发布INFO

The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability...

CVE-2026-18597

The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is re

历史摘要 · 未重新核验 · NVD