#cwe-918
共收录 2014 条相关情报。
← 返回所有主题 漏洞预警2026-10-21 发布HIGH
CVE-2026-92210
NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attac
来源摘录 · NVD
漏洞预警2026-10-21 发布HIGH
CVE-2026-92204
Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. Th
来源摘录 · NVD
漏洞预警2026-10-21 发布HIGH
CVE-2026-92203
Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability.
来源摘录 · NVD
漏洞预警2026-10-21 发布INFO
CVE-2026-114493
LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that vali
历史摘要 · 未重新核验 · NVD
安全公告2026-10-21 发布INFO
CVE-2026-114493
LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that vali
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-10-21 发布INFO
CVE-2026-114080
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated project me
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-21 发布INFO
CVE-2026-114076
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated tenants to
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-21 发布INFO
CVE-2026-114074
Trigger.dev before 4.5.10 contains a server-side request forgery vulnerability that allows authenticated project members
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-21 发布INFO
CVE-2026-114062
SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach intern
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-21 发布INFO
CVE-2026-114080
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated project me
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-21 发布MEDIUM
CVE-2026-114076
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated tenants to
来源摘录 · NVD
漏洞预警2026-10-21 发布MEDIUM
CVE-2026-114074
Trigger.dev before 4.5.10 contains a server-side request forgery vulnerability that allows authenticated project members
来源摘录 · NVD
漏洞预警2026-10-21 发布INFO
CVE-2026-114062
SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach intern
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-21 发布MEDIUM
CVE-2026-109682
Metasploit Framework versions before 6.5.7 allow HTTP requests made through send_request_cgi! to follow redirects to a d
来源摘录 · NVD
漏洞预警2026-10-21 发布MEDIUM
CVE-2026-109681
The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rog
来源摘录 · NVD
漏洞预警2026-10-20 发布INFO
CVE-2026-113728
Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.9.2, the unauthenticated POST /api/
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-20 发布INFO
CVE-2026-113704
A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file cr
历史摘要 · 未重新核验 · NVD
安全公告2026-10-20 发布INFO
CVE-2026-113704
A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file cr
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-10-20 发布INFO
CVE-2026-111761
---
- **Ecosystem:** Maven
- **Affected package:** `org.a2aproject.sdk:a2a-java-sdk-server-common` (push-notification d
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-20 发布INFO
CVE-2026-113671
ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI help
历史摘要 · 未重新核验 · NVD