CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

RedhatCVE•added 2026/01/09 9:12 a.m.•7 views

CVE-2022-0766

Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.17...

9.8CVSS6.8AI score0.01284EPSS

Exploits1References1

Huntr•added 2022/03/09 7:6 p.m.•78 views

Server-Side Request Forgery (SSRF)

Description The fixes for CVE-2022-0767 & CVE-2022-0766 only address loopback/localhost IP addresses, this is an issue as other internal endpoints may be accessible to an attacker one of the most popular examples is 169.254.169.254 which is the AWS metadata address Proof of Concept The same as...

6.4CVSS2.7AI score0.01316EPSS

Exploits3

NVD•added 2022/03/07 7:15 a.m.•31 views

CVE-2022-0766

Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.17...

9.8CVSS0.01284EPSS

Exploits1References2

CVE•added 2022/03/07 7:5 a.m.•126 views

CVE-2022-0766

CVE-2022-0766 describes a Server-Side Request Forgery (SSRF) in the GitHub repository janeczku/calibre-web prior to version 0.6.17. The vulnerability arises from an incomplete fix for a prior issue, allowing an attacker to induce the vulnerable service to make requests to internal or external res...

9.8CVSS8AI score0.01284EPSS

Exploits1References2Affected Software1