#cwe-918
共收录 2023 条相关情报。
← 返回所有主题 漏洞预警2026-08-07 发布INFO
CVE-2026-47659
Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior
历史摘要 · 未重新核验 · NVD
安全公告2026-08-07 发布INFO
CVE-2026-17597
Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification f
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-07 发布INFO
CVE-2026-17597
Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification f
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-07 发布INFO
CVE-2026-15570
An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE245
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-07 发布INFO
CVE-2026-54207
Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality (“!ArcEntryMove”) accepts
an arbitrary path, whi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-07 发布INFO
CVE-2026-54206
Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a
@@INCLUDE command, wh
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-07 发布INFO
CVE-2026-54205
Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality (//ServerClient_celink.htm)
accepts a “pathname”
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-07 发布INFO
CVE-2026-54204
Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot”
parameter, which can be set t
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-07 发布INFO
CVE-2026-16027
Server-Side request forgery (SSRF) vulnerability in Revenue Administration Türkiye's E-Signature allows Server Side Requ
历史摘要 · 未重新核验 · NVD
安全公告2026-08-07 发布INFO
CVE-2026-70332
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing ov
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-08-07 发布INFO
CVE-2026-53983
Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-06 发布INFO
CVE-2026-62857
Fedify is a TypeScript library for building federated server apps powered by ActivityPub. From version 1.2.0 through the
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-06 发布INFO
CVE-2026-53983
Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-06 发布INFO
CVE-2026-45573
Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.3
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-06 发布INFO
CVE-2026-15732
A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functiona
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-06 发布INFO
CVE-2026-18359
Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through 26.04.1 allows a re
历史摘要 · 未重新核验 · NVD
安全公告2026-08-06 发布INFO
CVE-2026-53984 · CVE-2026-53985 · CVE-2026-53983
Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-08-06 发布INFO
CVE-2026-19040
A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-06 发布INFO
CVE-2026-12605
In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfrestt
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-06 发布INFO
CVE-2026-18597
The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is re
历史摘要 · 未重新核验 · NVD