CVE-2022-41495

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the rssurlnews parameter at /manager/index.php...

Server side request forgery (ssrf)

iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery SSRF via the url parameter at admincp.php...

Server side request forgery (ssrf)

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the pkgurl parameter at /manager/index.php...

Server side request forgery (ssrf)

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the rssurlnews parameter at /manager/index.php...

CVE-2022-41497

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the pkgurl parameter at /manager/index.php...

PT-2022-25892 · Unknown · Clippercms

Name of the Vulnerable Software and Affected Versions: ClipperCMS version 1.3.3 Description: The issue is related to a Server-Side Request Forgery SSRF that can be exploited via the rss url news parameter at the "/manager/index.php" API endpoint. Recommendations: For ClipperCMS version 1.3.3, avo...

CVE-2022-41497

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the pkgurl parameter at /manager/index.php...

PT-2022-25894 · Unknown · Clippercms

Name of the Vulnerable Software and Affected Versions: ClipperCMS version 1.3.3 Description: A Server-Side Request Forgery SSRF issue was discovered, which can be exploited via the pkg url parameter at the "/manager/index.php" API endpoint. Recommendations: For ClipperCMS version 1.3.3, avoid usi...

CVE-2022-41496

CVE-2022-41496 affects iCMS v7.0.16 with a Server-Side Request Forgery (SSRF) via the url parameter in admincp.php. CVSSv3.1 base score 9.8 (CRITICAL) — network access, no user interaction required. Connected documents confirm the SSRF issue; PT-2022 offers a workaround: avoid or restrict the url...

CVE-2022-41497

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the pkgurl parameter at /manager/index.php...

CVE-2022-41496

iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery SSRF via the url parameter at admincp.php...

CVE-2022-41495

CVE-2022-41495 affects ClipperCMS 1.3.3 and is a Server-Side Request Forgery (SSRF) vulnerability exploitable via the rss_url_news parameter at /manager/index.php. The CVSS shows Network attack, no user interaction, with high impact on confidentiality, integrity, and availability (base score 9.8)...

CVE-2022-41495

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the rssurlnews parameter at /manager/index.php...

CVE-2022-41495

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the rssurlnews parameter at /manager/index.php...

CVE-2022-41497

CVE-2022-41497 affects ClipperCMS 1.3.3, where a Server-Side Request Forgery (SSRF) can be triggered via the pkg_url parameter at /manager/index.php. The CVSS v3.1 vector indicates a critical impact (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with a base score of 9.8. Exploitation is referenced in a co...

CVE-2022-41495

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the rssurlnews parameter at /manager/index.php...

Security Bulletin: Security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Security Identity Manager

Summary IBM WebSphere Application Server WAS is shipped with IBM Security Identity Manager ISIM. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On is vulnerable to Server-Side Request Forgery (CVE-2022-35282)

Summary IBM Security Access Manager for Enterprise Single Sign-On includes IBM WebSphere Application Server. IBM WebSphere Application Server is vulnerable to Server-Side Request Forgery CVE-2022-35282 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

Debian dla-3141 : wordpress - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3141 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3141-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3141-1] wordpress security update

Debian LTS Advisory DLA-3141-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 10, 2022 https://wiki.debian.org/LTS Package : wordpress Version : 5.0.17+dfsg1-0+deb10u1 CVE ID : CVE-2019-17670 Debian Bug : 942459 Several security vulnerabilities were...