Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:10 p.m.6 views

CVE-2026-8606

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause the server to issue HTTP requests to internal services via the security advisories package lookup feature. By directing requests to an internal management service and...

7CVSS5.5AI score0.00386EPSS
Exploits0References1
NVD
NVD
added 2026/05/27 12:16 a.m.18 views

CVE-2026-8606

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause the server to issue HTTP requests to internal services via the security advisories package lookup feature. By directing requests to an internal management service and...

7CVSS0.00386EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/05/26 11:59 p.m.9 views

CVE-2026-8606 Server-Side Request Forgery in GitHub Enterprise Server via Advisory Package URL Endpoint

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause the server to issue HTTP requests to internal services via the security advisories package lookup feature. By directing requests to an internal management service and...

7CVSS5.8AI score0.00386EPSS
Exploits0References6
EUVD
EUVD
added 2026/05/26 11:59 p.m.8 views

EUVD-2026-32025

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause the server to issue HTTP requests to internal services via the security advisories package lookup feature. By directing requests to an internal management service and...

7CVSS5.8AI score0.00386EPSS
Exploits0References6
CVE
CVE
added 2026/05/26 11:59 p.m.26 views

CVE-2026-8606

A Server-Side Request Forgery (SSRF) in GitHub Enterprise Server was exposed via the security advisories package lookup endpoint, allowing an attacker to issue HTTP requests to internal services. By directing requests to an internal management service and measuring response timing, an attacker co...

7CVSS5.8AI score0.00386EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2024/09/21 5:15 a.m.16 views

CVE-2024-6786

The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to the disclosure of sensitive information, such as configuration files and JWT signing secrets...

6.5CVSS0.00546EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/09/21 4:14 a.m.12 views

CVE-2024-6786 MXview One Series vulnerable to Path Traversal

The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to the disclosure of sensitive information, such as configuration files and JWT signing secrets...

6.5CVSS6.7AI score0.00546EPSS
Exploits0References2
Rows per page
Query Builder