CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2019/10/24 11:15 a.m.•16 views

CVE-2019-18394

A Server Side Request Forgery SSRF vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests...

9.8CVSS8AI score0.32304EPSS

Exploits1References2

Prion•added 2019/10/24 11:15 a.m.•15 views

Server side request forgery (ssrf)

A Server Side Request Forgery SSRF vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests...

7.5CVSS8.6AI score0.32304EPSS

Exploits1References2Affected Software1

ATTACKERKB•added 2019/10/24 12:0 a.m.•23 views

CVE-2019-18394

A Server Side Request Forgery SSRF vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests. Recent assessments: ericalexanderorg at August 04, 2020 4:42pm UTC reported: More detail Stupid easy SSRF...

9.8CVSS2.7AI score0.32304EPSS

Exploits1References3

Prion•added 2018/09/03 7:29 p.m.•16 views

Server side request forgery (ssrf)

In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF...

5CVSS8.5AI score0.01331EPSS

Exploits0References1Affected Software1

Rows per page