52210 matches found
CVE-2026-53147 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-aws, linux-azure, linux-qemu...
CVE-2026-53186 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-aws, linux-azure, linux-qemu...
CVE-2026-53205 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-aws, linux-azure, linux-qemu...
CVE-2026-53212 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-aws, linux-azure, linux-qemu...
CVE-2026-53220 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-aws, linux-azure, linux-qemu...
GHSA-3J78-PF43-6MVQ vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-aws, linux-azure, linux-qemu...
GHSA-5R3H-V82J-R7RR vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-aws, linux-azure, linux-qemu...
GHSA-62M5-M548-5V5F vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-aws, linux-azure, linux-qemu...
GHSA-5Q2P-7748-G6QP vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-aws, linux-azure, linux-qemu...
CVE-2026-60000
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service resource consumption from excessive authentication attempts because MaxAuthTries was mishandled for GSSAPIAuthentication...
CVE-2026-59806: URL Redirection to Untrusted Site
Gradio before 6.20.0 contains an open redirect and server-side request forgery vulnerability that allows attackers to redirect users to arbitrary URLs or perform client-side SSRF by supplying unvalidated HTTP/HTTPS URLs to the filefetch function in the /gradioapi/file= endpoint. Attackers can cra...
PT-2026-56914
Name of the Vulnerable Software and Affected Versions PAN-OS affected versions not specified Description A server-side request forgery SSRF issue in the management web interface allows an authenticated administrator with network access to perform unauthorized requests from the firewall to interna...
CVE-2026-44161: Server-Side Request Forgery (SSRF)
Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, the Fluentd outhttp output plugin allows placeholders such as $tag in the endpoint configuration parameter, and if a placeholder value is derived from untrusted...
Exploit for Path Traversal in Adobe Coldfusion
CVE-2026-48282 — Adobe ColdFusion RDS Validation and Detection...
CVE-2026-54607
FastGPT is a knowledge-based AI application platform. Prior to 4.15.0-beta4, the HTTP-tool OpenAPI schema importer validates only the top-level URL before passing it to SwaggerParser.bundle, whose remote reference resolver fetches $ref URLs without FastGPT's internal-address guard and returns...
CVE-2026-54607
FastGPT is a knowledge-based AI application platform. Prior to 4.15.0-beta4, the HTTP-tool OpenAPI schema importer validates only the top-level URL before passing it to SwaggerParser.bundle, whose remote reference resolver fetches $ref URLs without FastGPT's internal-address guard and returns...
CVE-2026-54607 FastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard)
FastGPT is a knowledge-based AI application platform. Prior to 4.15.0-beta4, the HTTP-tool OpenAPI schema importer validates only the top-level URL before passing it to SwaggerParser.bundle, whose remote reference resolver fetches $ref URLs without FastGPT's internal-address guard and returns...
Server-side Request Forgery (SSRF)
Overview @aborruso/ckan-mcp-server is a MCP server for interacting with CKAN open data portals Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through the validateServerUrl hostname check in src/utils/http.ts. An attacker can make the server send outbound...
