Lucene search
K

16 matches found

NVD
NVD
added 2026/02/27 3:16 p.m.11 views

CVE-2026-3327

Authenticated Iframe Injection in Dato CMS Web Previews plugin. This vulnerability permits a malicious authenticated user to circumvent the restriction enforced on the configured frontend URL, enabling the loading of arbitrary external resources or origins. This issue affects Web Previews v1.0.31...

4.8CVSS0.00322EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2007-0189

Malware in sbrugna...

7.5CVSS6.4AI score0.03618EPSS
Exploits0References10
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2022-24699

Malicious code in bioql PyPI...

9.1CVSS7.2AI score0.01514EPSS
Exploits1References5
NVD
NVD
added 2025/08/04 9:15 a.m.30 views

CVE-2025-8341

Grafana is an open-source platform for monitoring and observability. The Infinity datasource plugin, maintained by Grafana Labs, allows visualizing data from JSON, CSV, XML, GraphQL, and HTML endpoints. If the plugin was configured to allow only certain URLs, an attacker could bypass this...

5CVSS0.0029EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 12:10 p.m.10 views

CVE-2012-2632

SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intende...

2.6CVSS7.2AI score0.01211EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/04/12 12:0 a.m.30 views

CVE-2023-26406 ZDI-CAN-20712: Net.HTTP.request URL restriction bypass

Adobe Acrobat Reader versions 23.001.20093 and earlier and 20.005.30441 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must...

7.8CVSS7.9AI score0.04182EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/05/14 10:15 a.m.5 views

CVE-2022-1379

URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5. An attacker can abuse this to bypass URL restrictions that are imposed by the different security profiles and achieve server side request forgery SSRF. This allows accessing restricted internal resources/servers or...

9.1CVSS7.1AI score0.01514EPSS
Exploits1References7
Prion
Prion
added 2022/05/14 10:15 a.m.19 views

Server side request forgery (ssrf)

URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5. An attacker can abuse this to bypass URL restrictions that are imposed by the different security profiles and achieve server side request forgery SSRF. This allows accessing restricted internal resources/servers or...

6.4CVSS7.1AI score0.01514EPSS
Exploits1References4Affected Software2
UbuntuCve
UbuntuCve
added 2022/05/14 10:15 a.m.39 views

CVE-2022-1379

URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5. An attacker can abuse this to bypass URL restrictions that are imposed by the different security profiles and achieve server side request forgery SSRF. This allows accessing restricted internal resources/servers or...

9.1CVSS7.1AI score0.01514EPSS
Exploits1References3
OSV
OSV
added 2022/05/14 10:15 a.m.2 views

UBUNTU-CVE-2022-1379

URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5. An attacker can abuse this to bypass URL restrictions that are imposed by the different security profiles and achieve server side request forgery SSRF. This allows accessing restricted internal resources/servers or...

9.1CVSS5.8AI score0.01514EPSS
Exploits1References4
Cvelist
Cvelist
added 2022/05/14 9:55 a.m.32 views

CVE-2022-1379 URL Restriction Bypass in plantuml/plantuml

URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5. An attacker can abuse this to bypass URL restrictions that are imposed by the different security profiles and achieve server side request forgery SSRF. This allows accessing restricted internal resources/servers or...

7.2CVSS9.6AI score0.01514EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2022/05/14 9:55 a.m.37 views

CVE-2022-1379

URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5. An attacker can abuse this to bypass URL restrictions that are imposed by the different security profiles and achieve server side request forgery SSRF. This allows accessing restricted internal resources/servers or...

9.1CVSS7.2AI score0.01514EPSS
Exploits1
OSV
OSV
added 2022/05/14 9:55 a.m.25 views

CVE-2022-1379 URL Restriction Bypass in plantuml/plantuml

URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5. An attacker can abuse this to bypass URL restrictions that are imposed by the different security profiles and achieve server side request forgery SSRF. This allows accessing restricted internal resources/servers or...

7.2CVSS7.3AI score0.01514EPSS
Exploits1References6
securityvulns
securityvulns
added 2007/01/12 12:0 a.m.98 views

[SA23626] FirePass URL Restriction Bypass

TITLE: FirePass URL Restriction Bypass SECUNIA ADVISORY ID: SA23626 VERIFY ADVISORY: http://secunia.com/advisories/23626/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: FirePass 6.x http://secunia.com/product/13146/ FirePass 5.x...

0.5AI score
Exploits0
securityvulns
securityvulns
added 2007/01/12 12:0 a.m.71 views

[SA23640] FirePass URL Restriction Bypass Vulnerabilities

TITLE: FirePass URL Restriction Bypass Vulnerabilities SECUNIA ADVISORY ID: SA23640 VERIFY ADVISORY: http://secunia.com/advisories/23640/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: FirePass 5.x http://secunia.com/product/4695/ DESCRIPTION: Michael...

1.2AI score
Exploits0
OSV
OSV
added 2006/07/23 12:0 a.m.62 views

DSA-1120 mozilla-firefox - several vulnerabilities

Bulletin has no description...

9.3CVSS6.8AI score0.07251EPSS
Exploits0
Rows per page
Query Builder