12051 matches found
CVE-2025-23082
Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
CVE-2025-23082
Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
CVE-2025-23082
CVE-2025-23082 affects Veeam Backup for Microsoft Azure. The flaw is an SSRF vulnerability that could allow an unauthenticated attacker to send unauthorized requests from the system, potentially enabling network enumeration. Public details in the Veeam KB indicate the issue impacts Veeam Backup f...
CVE-2025-23082
Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
CVE-2024-57767
MSFM versions prior to v2025.01.01 are vulnerable to a Server-Side Request Forgery (SSRF) flaw located in the /file/download component. This vulnerability allows an attacker to perform unauthorized access to internal resources. To mitigate this risk, it is recommended to disable the /file/downloa...
PT-2025-3561 · Msfm · Msfm
Name of the Vulnerable Software and Affected Versions: MSFM versions prior to v2025.01.01 Description: The issue is related to a Server-Side Request Forgery SSRF in MSFM, which occurs via the /file/download component. This allows for unauthorized access to internal resources. Recommendations: For...
CVE-2024-57767
MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery SSRF via the component /file/download...
CVE-2024-57767
MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery SSRF via the component /file/download...
PT-2025-3907 · Unknown · Invoice Ninja
Name of the Vulnerable Software and Affected Versions: Invoice Ninja versions 5.8.56 through 5.11.23 Description: Invoice Ninja is vulnerable to authenticated Server-Side Request Forgery SSRF, allowing for arbitrary file read and network resource requests as the application user. This issue enabl...
TYPO3 9.0.0 < 9.5.49 ELTS / 10.0.0 < 10.4.48 ELTS / 11.0.0 < 11.5.42 ELTS / 12.0.0 < 12.4.25 / 13.0.0 < 13.4.3 (TYPO3-CORE-SA-2025-002)
The version of TYPO3 installed on the remote host is 9.0.0 prior to 9.5.49 ELTS / 10.0.0 prior to 10.4.48 ELTS / 11.0.0 prior to 11.5.42 ELTS / 12.0.0 prior to 12.4.25 / 13.0.0 prior to 13.4.3. It is, therefore, affected by a vulnerability as referenced in the TYPO3-CORE-SA-2025-002 advisory. -...
PT-2025-4812 · Veeam · Veeam Backup For Microsoft Azure
Name of the Vulnerable Software and Affected Versions: Veeam Backup for Microsoft Azure versions prior to 7.1.0.59 Description: Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the...
Unspecified Vulnerability in SonicWALL SonicOS (CNVD-2025-01660)
SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. A security vulnerability exists in SonicWall SonicOS that stems from the presence of a server-side request forgery vulnerability. A remote attacker can exploit this vulnerability to...
PT-2025-2033 · Hewlett Packard · Hp Openview Network Node Manager
Name of the Vulnerable Software and Affected Versions: HP OpenView Network Node Manager affected versions not specified Description: The issue concerns a Server-Side Request Forgery SSRF in HP OpenView Network Node Manager. No specific details about affected devices, real-world incidents, or...
openSUSE Security Advisory (SUSE-SU-2025:0072-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE 15 Security Update : logback (SUSE-SU-2025:0072-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0072-1 advisory. - CVE-2024-12798: Fixed arbitrary code execution via JaninoEventEvaluator bsc1234742 - CVE-2024-12801: Fixed Server-Side Request Forgery in...
SUSE-SU-2025:0072-1 Security update for logback
This update for logback fixes the following issues: - CVE-2024-12798: Fixed arbitrary code execution via JaninoEventEvaluator bsc1234742 - CVE-2024-12801: Fixed Server-Side Request Forgery in SaxEventRecorder bsc1234743...
Security Bulletin:Due to use of WebSphere Application Server traditional, IBM Workload Automation is vulnerable to a server-side request forgery (SSRF) vulnerability
Summary WebSphere Application Server traditional is used by IBM Workload Automation CVE-2024-22329 Vulnerability Details CVEID:CVE-2024-22329 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.3 are vulnerable to server-side...
Gradio < 4.42.0 SSRF
The version of Gradio installed on the remote host is prior to 4.42.0. It is, therefore, affected by a hidden server-side request forgery SSRF vulnerability. The reason is that within the saveurltocache function, there are no restrictions on the URL, which allows access to local target resources...
