Lucene search
+L

23020 matches found

Cvelist
Cvelist
•added 2026/09/22 6:58 p.m.•46 views

CVE-2026-84395 Premiere Pro | Server-Side Request Forgery (SSRF) (CWE-918)

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

7.1CVSS0.00249EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/22 6:58 p.m.•18 views

CVE-2026-84395 Premiere Pro | Server-Side Request Forgery (SSRF) (CWE-918)

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

7.1CVSS5.8AI score0.00249EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 6:58 p.m.•16 views

EUVD-2026-84799

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

7.1CVSS5.8AI score0.00249EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/22 6:58 p.m.•42 views

CVE-2026-84395

Adobe Premiere Pro is affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) that could lead to privilege escalation and potentially result in unauthorized write access . Exploitation of this issue does not require user interaction. The CVSS 3.1 score is 7.1 (High) . No specific...

7.1CVSS5.8AI score0.00249EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/09/22 6:56 p.m.•13 views

CVE-2026-93384

A flaw was found in Omnibox in Google Chrome. This server-side request forgery SSRF vulnerability allows a remote attacker, through social engineering and crafted network traffic, to trick the application into making requests to unintended locations. This can lead to a bypass of system access...

3.7CVSS5.8AI score0.00245EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/22 6:56 p.m.•16 views

EUVD-2026-84791

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...

9.6CVSS8.1AI score0.00728EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/22 6:56 p.m.•45 views

CVE-2026-82000 Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...

9.6CVSS0.00728EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/22 6:56 p.m.•14 views

CVE-2026-82000 Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...

9.6CVSS8.1AI score0.00728EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/22 6:56 p.m.•39 views

CVE-2026-82000

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918). A low-privileged attacker can exploit this flaw to achieve privilege escalation and gain elevated access to internal resources . The vulnerability requires no user interaction for explo...

9.6CVSS8.1AI score0.00728EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/22 6:55 p.m.•50 views

CVE-2026-81999 Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not requir...

8.7CVSS0.00806EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/22 6:55 p.m.•27 views

CVE-2026-81999

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) that can lead to privilege escalation . An attacker with high privileges can exploit this issue to gain elevated access to internal resources. Exploitation does not require any user inte...

8.7CVSS5.9AI score0.00806EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/22 6:55 p.m.•21 views

CVE-2026-81999 Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not requir...

8.7CVSS5.9AI score0.00806EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 6:55 p.m.•15 views

EUVD-2026-84788

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not requir...

8.7CVSS5.9AI score0.00806EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 6:47 p.m.•16 views

EUVD-2026-84759

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, JiraUserMixin.lookupuserbypermissions uses the module-level requests.get function instead of the fetcher's protected session. A caller-controlled public Jira URL can redirect that...

5.3CVSS6.2AI score0.01042EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2026/09/22 6:47 p.m.•45 views

CVE-2026-77249 MCP Atlassian: Incomplete fix for CVE-2026-27826: redirect-based SSRF via unhooked requests session in Jira user-permission lookup

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, JiraUserMixin.lookupuserbypermissions uses the module-level requests.get function instead of the fetcher's protected session. A caller-controlled public Jira URL can redirect that...

5.3CVSS0.00322EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2026/09/22 6:47 p.m.•20 views

CVE-2026-77249 MCP Atlassian: Incomplete fix for CVE-2026-27826: redirect-based SSRF via unhooked requests session in Jira user-permission lookup

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, JiraUserMixin.lookupuserbypermissions uses the module-level requests.get function instead of the fetcher's protected session. A caller-controlled public Jira URL can redirect that...

5.3CVSS5.8AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/22 6:47 p.m.•20 views

CVE-2026-77249 MCP Atlassian: Incomplete fix for CVE-2026-27826: redirect-based SSRF via unhooked requests session in Jira user-permission lookup

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, JiraUserMixin.lookupuserbypermissions uses the module-level requests.get function instead of the fetcher's protected session. A caller-controlled public Jira URL can redirect that...

5.3CVSS5.8AI score0.00322EPSS
SaveExploits1References4
CVE
CVE
•added 2026/09/22 6:47 p.m.•35 views

CVE-2026-77249

MCP Atlassian , an MCP server for Confluence and Jira, is vulnerable to a Server-Side Request Forgery (SSRF) via redirect-based attacks in versions prior to 0.22.0 . The root cause is that the JiraUserMixin._lookup_user_by_permissions function uses the module-level requests.get instead of a prote...

5.3CVSS5.8AI score0.00322EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2026/09/22 6:17 p.m.•18 views

CVE-2026-83660

Adobe Campaign Classic ACC is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed...

10CVSS0.00341EPSS
SaveExploits1References1
NVD
NVD
•added 2026/09/22 6:17 p.m.•25 views

CVE-2026-82013

Adobe Campaign Classic ACC is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...

9.9CVSS0.00818EPSS
SaveExploits0References1
Rows per page
Query Builder