10101 matches found
CVE-2023-31848
davinci 0.3.0-rc is vulnerable to Server-side request forgery SSRF...
CVE-2023-31848
davinci 0.3.0-rc is vulnerable to Server-side request forgery SSRF...
Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery due to Apache CXF (CVE-2022-46364)
Summary There is a vulnerability in the Apache CXF library used by IBM WebSphere Application Server Liberty with the jaxws-2.2 feature enabled. This has been addressed. Vulnerability Details CVEID:CVE-2022-46364 DESCRIPTION: Apache CXF is vulnerable to server-side request forgery, caused by a fla...
WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Server Side Request Forgery (SSRF)
Software Essential Addons for Elementor Pro Type Plugin Vulnerable versions = 5.4.8 Fixed in 5.4.9 OWASP Top 10 A5: Broken Access Control Classification Server Side Request Forgery SSRF CVE CVE-2023-32245 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 6f79f41d4291 Credits...
CVE-2023-23169
Synapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery Directory Traversal...
Directory traversal
Synapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery Directory Traversal...
CVE-2023-23169
Synapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery Directory Traversal...
CVE-2023-23169
Synapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery Directory Traversal...
CVE-2023-23169
Synapsoft pdfocus 1.17 is affected by local file inclusion and server-side request forgery (SSRF) via directory traversal. The issue is tracked as CVE-2023-23169 and has a CVSS v3.1 base score of 6.5 (MEDIUM) with Network attack vector, Low attack complexity, Low privileges required, no user inte...
Teltonika Remote Management System and RUT Model Routers
1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Teltonika Equipment: Remote Management System and RUT model routers Vulnerabilities: Observable Response Discrepancy, Improper Authentication, Server-Side Request Forgery, Cross-site Scripting, Inclusio...
Server-side Request Forgery (SSRF)
github.com/imgproxy/imgproxy is vulnerable to Server-Side Request Forgery SSRF. The vulnerability exists due to unsafe sanitation of the imageURL parameter, which allows an attacker to cause server-side request forgery...
WordPress WP Fastest Cache Plugin < 1.1.5 is vulnerable to Server Side Request Forgery (SSRF)
Software WP Fastest Cache Type Plugin Vulnerable versions 1.1.5 Fixed in 1.1.5 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2023-1938 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID b892370bc54e Credits Erwan LR WPScan Required privile...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF vulnerability that could allow a rogue server on the local network to modify its URL to point back to the loopback adapter was addressed in Western Digital My Cloud OS 5 devices. This could allow the URL to exploit other vulnerabilities on the local server.This...
CVE-2022-29840 Server Side Request Forgery Vulnerability in Western Digital My Cloud Devices
Server-Side Request Forgery SSRF vulnerability that could allow a rogue server on the local network to modify its URL to point back to the loopback adapter was addressed in Western Digital My Cloud OS 5 devices. This could allow the URL to exploit other vulnerabilities on the local server.This...
CVE-2022-29840 Server Side Request Forgery Vulnerability in Western Digital My Cloud Devices
Server-Side Request Forgery SSRF vulnerability that could allow a rogue server on the local network to modify its URL to point back to the loopback adapter was addressed in Western Digital My Cloud OS 5 devices. This could allow the URL to exploit other vulnerabilities on the local server.This...
Server side request forgery (ssrf)
Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request...
GHSA-9X7H-GGC3-XG47 imgproxy is vulnerable to Server-Side Request Forgery
imgproxy prior to version 3.15.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter...
CVE-2023-30019
imgproxy =3.14.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter...