Lucene search
+L

57488 matches found

Snyk
Snyk
added 2026/07/03 10:18 p.m.13 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the repository migration process when handling HTTP redirects. An attacker can access internal network resources by supplying a crafted URL that triggers the application to follow redirects to...

7.1CVSS6AI score0.00415EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/03 10:18 p.m.11 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the repository migration process when handling HTTP redirects. An attacker can access internal network resources by supplying a crafted URL that triggers the application to follow redirects to...

7.1CVSS6AI score0.00415EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/03 9:17 p.m.17 views

CVE-2026-58278

Server-side request forgery ssrf in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

5.4CVSS0.004EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/03 9:17 p.m.14 views

CVE-2026-57987

Server-side request forgery ssrf in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS0.00874EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/03 8:54 p.m.84 views

CVE-2026-58418

The CVE-2026-58418 entry describes an SSRF via HTTP Redirect vulnerability in the Repository Migration feature. The description and connected documents indicate this affects the repository migration flow, enabling an SSRF condition through HTTP redirects. Public details in the connected sources a...

6.5CVSS5.9AI score0.00415EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/03 8:54 p.m.62 views

CVE-2026-58418 SSRF via HTTP Redirect in Repository Migration

SSRF via HTTP Redirect in Repository Migration...

6.5CVSS0.00415EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/03 8:54 p.m.11 views

CVE-2026-58418 SSRF via HTTP Redirect in Repository Migration

SSRF via HTTP Redirect in Repository Migration...

6.5CVSS5.9AI score
SaveExploits0References6
EUVD
EUVD
added 2026/07/03 8:35 p.m.20 views

EUVD-2026-41581

Server-side request forgery ssrf in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

5.4CVSS6AI score0.004EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/03 8:35 p.m.11 views

CVE-2026-58278

Server-side request forgery ssrf in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

5.4CVSS6AI score0.004EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/07/03 8:35 p.m.25 views

EUVD-2026-41567

Server-side request forgery ssrf in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

7.4CVSS6AI score0.00876EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/03 8:35 p.m.14 views

CVE-2026-57987

Server-side request forgery ssrf in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS6AI score0.00874EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/03 8:19 p.m.25 views

CVE-2026-22874

Gitea versions up to and including 1.26.2 have incomplete SSRF protection in webhook and migration allow-list filtering...

9.6CVSS5.9AI score0.00464EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2026/07/03 8:19 p.m.62 views

CVE-2026-22874 Gitea webhook and migration allow-list filtering permits SSRF

Gitea versions up to and including 1.26.2 have incomplete SSRF protection in webhook and migration allow-list filtering...

9.6CVSS0.00464EPSS
SaveExploits1References5
Microsoft CVE
Microsoft CVE
added 2026/07/03 2:00 p.m.16 views

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Server-side request forgery ssrf in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

7.4CVSS6AI score0.00876EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/03 12:00 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2026-54430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - liboauth2 is vulnerable to Server-Side Request Forgery in oauth2josejwksawsalbresolve function. The AWS ALB verifier reads both signer and kid from the unverifi...

5.1CVSS5.9AI score0.00169EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/03 12:00 a.m.39 views

PT-2026-55621

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description A Server-side request forgery SSRF issue exists, which allows an unauthorized attacker to perform spoofing over a network. SSRF is a flaw where an attacker can induce th...

6.5CVSS6.1AI score0.00874EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/03 12:00 a.m.27 views

PT-2026-55493

Name of the Vulnerable Software and Affected Versions WP Import Export Lite versions prior to 3.9.31 Description An issue exists in the wpie import upload file from url AJAX action. The plugin initially uses wp safe remote get to download files, which blocks private IP ranges. However, if this ca...

5.5CVSS6.1AI score0.00385EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/07/03 12:00 a.m.30 views

PT-2026-55652

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Server-Side Request Forgery SSRF occurs during the repository migration process via HTTP Redirect. SSRF is a flaw that allows an attacker to induce the...

6.5CVSS5.9AI score0.00415EPSS
SaveExploits0References14
NVD
NVD
added 2026/07/02 11:16 p.m.16 views

CVE-2026-45499

Server-side request forgery ssrf in Azure OpenAI allows an authorized attacker to elevate privileges over a network...

9.9CVSS0.00778EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/02 11:16 p.m.51 views

CVE-2026-57100

Server-side request forgery ssrf in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...

9.9CVSS0.00778EPSS
SaveExploits0References1
Rows per page
Query Builder