Lucene search
+L

9565 matches found

Cvelist
Cvelist
added 2023/09/01 12:0 a.m.40 views

CVE-2023-40969

Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery SSRF via admin/modules/bibliography/popp2p.php...

6.5AI score0.00341EPSS
SaveExploits1References2
OSV
OSV
added 2023/09/01 12:0 a.m.32 views

CVE-2023-36088

Server Side Request Forgery SSRF vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information...

7.5CVSS7.4AI score0.00628EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2023/09/01 12:0 a.m.12 views

CVE-2023-40969

Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery SSRF via admin/modules/bibliography/popp2p.php...

6.9AI score0.00341EPSS
SaveExploits1References2
NVD
NVD
added 2023/08/31 1:15 a.m.28 views

CVE-2023-4651

Server-Side Request Forgery SSRF in GitHub repository instantsoft/icms2 prior to 2.16.1...

6.4CVSS5.8AI score0.00349EPSS
SaveExploits1References2
Prion
Prion
added 2023/08/31 1:15 a.m.20 views

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF in GitHub repository instantsoft/icms2 prior to 2.16.1...

4.6CVSS5.5AI score0.00349EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/31 12:0 a.m.12 views

CVE-2023-4651 Server-Side Request Forgery (SSRF) in instantsoft/icms2

Server-Side Request Forgery SSRF in GitHub repository instantsoft/icms2 prior to 2.16.1...

6.4CVSS6.8AI score0.00349EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/08/31 12:0 a.m.8 views

PT-2023-30065 · Unknown · Instantsoft/Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1 Description: The issue is related to Server-Side Request Forgery SSRF in the GitHub repository instantsoft/icms2. This allows an attacker to trick the server into making unintended requests...

6.4CVSS5.8AI score0.00349EPSS
SaveExploits1References6
NVD
NVD
added 2023/08/30 1:15 p.m.37 views

CVE-2023-4624

Server-Side Request Forgery SSRF in GitHub repository bookstackapp/bookstack prior to v23.08...

2.4CVSS3.6AI score0.00533EPSS
SaveExploits1References2
Prion
Prion
added 2023/08/30 1:15 p.m.15 views

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF in GitHub repository bookstackapp/bookstack prior to v23.08...

2.8CVSS4AI score0.00533EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/08/30 12:2 p.m.45 views

CVE-2023-4624 Server-Side Request Forgery (SSRF) in bookstackapp/bookstack

Server-Side Request Forgery SSRF in GitHub repository bookstackapp/bookstack prior to v23.08...

2.4CVSS4AI score0.00533EPSS
SaveExploits1References2
CVE
CVE
added 2023/08/30 12:2 p.m.112 views

CVE-2023-4624

CVE-2023-4624: SSRF in BookStack (bookstackapp/bookstack) prior to v23.08. The issue is a server-side request forgery in the application’s handling of requests, enabling the server to be coerced into making unintended outbound requests. Affected product: BookStack software; vulnerable component/f...

2.4CVSS3.5AI score0.00533EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/30 12:2 p.m.21 views

CVE-2023-4624 Server-Side Request Forgery (SSRF) in bookstackapp/bookstack

Server-Side Request Forgery SSRF in GitHub repository bookstackapp/bookstack prior to v23.08...

2.4CVSS6.9AI score0.00533EPSS
SaveExploits1References2
GithubExploit
GithubExploit
added 2023/08/29 2:2 p.m.471 views

Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets

Maltrail v0.53 RCE PoC for Maltrail v0.53 RCE I could not get...

6.5CVSS6.4AI score0.06976EPSS
SaveExploits29
Prion
Prion
added 2023/08/24 11:15 p.m.23 views

Server side request forgery (ssrf)

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. In versions 3.2.0 through 4.1.2, the endpoint /proxy/?url= does not properly protect against server-side request forgery. This allows an attacker to port scan internal hosts and...

5CVSS7.4AI score0.00638EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/08/24 11:15 p.m.13 views

PYSEC-2023-269

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. In versions 3.2.0 through 4.1.2, the endpoint /proxy/?url= does not properly protect against server-side request forgery. This allows an attacker to port scan internal hosts and...

7.5CVSS7.4AI score0.00638EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/08/24 10:45 p.m.25 views

CVE-2023-40017 Geonode Server Side Request Forgery vulnerability

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. In versions 3.2.0 through 4.1.2, the endpoint /proxy/?url= does not properly protect against server-side request forgery. This allows an attacker to port scan internal hosts and...

7.5CVSS7.6AI score0.00638EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/08/24 10:45 p.m.19 views

CVE-2023-40017 Geonode Server Side Request Forgery vulnerability

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. In versions 3.2.0 through 4.1.2, the endpoint /proxy/?url= does not properly protect against server-side request forgery. This allows an attacker to port scan internal hosts and...

7.5CVSS7.5AI score0.00638EPSS
SaveExploits1References2
OSV
OSV
added 2023/08/24 10:45 p.m.24 views

CVE-2023-40017 Geonode Server Side Request Forgery vulnerability

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. In versions 3.2.0 through 4.1.2, the endpoint /proxy/?url= does not properly protect against server-side request forgery. This allows an attacker to port scan internal hosts and...

7.5CVSS7.2AI score0.00638EPSS
SaveExploits1References4
Veracode
Veracode
added 2023/08/24 6:26 a.m.29 views

Server-Side Request Forgery (SSRF)

org.apache.xmlgraphics:batik-script is vulnerable to Server-Side Request Forgery SSRF. An attacker is able to trick the application into loading a malicious SVG file, which could then be used to probe user data...

4.4CVSS6.9AI score0.00749EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
added 2023/08/24 5:40 a.m.32 views

Server-Side Request Forgery (SSRF)

Apache XML Graphics Batik is vulnerable to Server-Side Request Forgery SSRF. An attacker is able to trick the application into loading a malicious SVG file, which could then be used to cause excess resource consumption or make unauthorized requests to other systems...

7.1CVSS6.9AI score0.00786EPSS
SaveExploits0References10Affected Software3
Rows per page
Query Builder