Lucene search
+L

5 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/14 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-110225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by...

5.1CVSS5.9AI score0.00342EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/10/13 7:18 p.m.•27 views

DEBIAN-CVE-2026-110225

Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbnails without private-address checks. Attackers can create bookmarks pointing to loopback, private, or cloud metadata...

5.1CVSS5.9AI score0.00342EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/10/13 7:18 p.m.•15 views

UBUNTU-CVE-2026-110225

Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbnails without private-address checks. Attackers can create bookmarks pointing to loopback, private, or cloud metadata...

5.1CVSS5.9AI score0.00342EPSS
SaveExploits0References7
Mend
Mend
•added 2026/10/13 6:50 p.m.•16 views

CVE-2026-110225

Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbnails without private-address checks. Attackers can create bookmarks pointing to loopback, private, or cloud metadata...

5.1CVSS5.9AI score0.00342EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/13 6:50 p.m.•10 views

CVE-2026-110225 Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route

Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbnails without private-address checks. Attackers can create bookmarks pointing to loopback, private, or cloud metadata...

5.1CVSS5.9AI score0.00342EPSS
SaveExploits0References5
Rows per page
Query Builder