共收录 2042 条相关情报。
← 返回所有主题CVE-2026-48998
guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 contain improper Host he
CVE-2026-9204
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.10.8, 18.11 before 18.11.5, a
CVE-2026-40999
When WS-Addressing is used with non-anonymous ReplyTo or FaultTo addresses, Spring WS may initiate outbound connections
CVE-2026-50131
Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Fedify previously addressed SS
CVE-2026-47938
Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF)
CVE-2026-47938
Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF)
CVE-2026-45504
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over
CVE-2026-45502
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information ov
CVE-2026-45501
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows
CVE-2026-41854
Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provid
CVE-2026-47735
### Summary Arc's user-SQL validator (`internal/api/query.go:ValidateSQLRequest`) blocked only `read_parquet(` and `arc
CVE-2026-47719
## Summary An unauthenticated attacker (Alice) connects to FUXA's Socket.IO endpoint and emits a `device-webapi-request
CVE-2026-11469
A flaw has been found in jishenghua jshERP up to 3.6. Impacted is the function insertPlatformConfig of the file jshERP-b
CVE-2026-11469
A flaw has been found in jishenghua jshERP up to 3.6. Impacted is the function insertPlatformConfig of the file jshERP-b
CVE-2026-11437
A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/c
CVE-2026-11437
CVE-2026-11437 是一个影响 perfree go-fastdfs-web 至 1.3.7 版本的服务器端请求伪造（SSRF）漏洞。漏洞位于组件的安装端点中的 /install/checkServer 文件，具体为 checkS
CVE-2026-11424
A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared by Altium Enterprise Ser
CVE-2026-46393
HAX CMS helps manage microsite universe with PHP or NodeJs backends. An authenticated Server-Side Request Forgery (SSRF)
CVE-2026-46391
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 9.0.1 and prior to version 26.0
CVE-2026-47684
Summary: The private IP blocklist regex used in the URL download feature does not match IPv4-mapped IPv6 addresses (e.g.