13333 matches found
CVE-2024-44677
eladmin v2.7 and before is vulnerable to Server-Side Request Forgery SSRF which allows an attacker to execute arbitrary code via the DatabaseController.java component...
CVE-2023-37230
Loftware Spectrum testDeviceConnection before 5.1 allows SSRF...
CVE-2023-37229
Loftware Spectrum before 5.1 allows SSRF...
CVE-2023-37229
Loftware Spectrum before 5.1 allows SSRF...
CVE-2024-44677
eladmin v2.7 and before is vulnerable to Server-Side Request Forgery SSRF which allows an attacker to execute arbitrary code via the DatabaseController.java component...
CVE-2024-44677
Summary (CVE-2024-44677) eladmin v2.7 and earlier is vulnerable to Server-Side Request Forgery (SSRF) via the DatabaseController.java component, enabling an attacker to execute arbitrary code. This aligns with Red Hat and CVE records describing a high-severity, network-based impact with no privil...
CVE-2023-37229
Loftware Spectrum before 5.1 allows SSRF...
CVE-2023-37230
Loftware Spectrum testDeviceConnection before 5.1 allows SSRF...
CVE-2023-37229
CVE-2023-37229 concerns Loftware Spectrum and is described as a server-side request forgery (SSRF) vulnerability present in versions prior to 5.1. The Red Hat, NVD, CVE listings all reiterate that Loftware Spectrum before 5.1 is affected by SSRF. The PT-Security entry confirms the issue is SSRF a...
CVE-2023-37230
Loftware Spectrum testDeviceConnection before 5.1 allows SSRF...
CVE-2023-37230
Loftware Spectrum's testDeviceConnection vulnerability (CVE-2023-37230) is an SSRF issue in versions prior to 5.1. The CVSS 3.1 score is 8.8 (High) with network attack, no privileges, user interaction required, and impacts to confidentiality, integrity, and availability. The provided sources conf...
CVE-2024-44677
eladmin v2.7 and before is vulnerable to Server-Side Request Forgery SSRF which allows an attacker to execute arbitrary code via the DatabaseController.java component...
CVE-2024-44721
SeaCMS v13.1 was discovered to a Server-Side Request Forgery SSRF via the url parameter at /adminreslib.php...
Security Bulletin: IBM Maximo Application Suite - AI Broker component uses request-2.88.2.tgz which is vulnerable to this CVE-2023-28155
Summary IBM Maximo Application Suite - AI Broker component uses request-2.88.2.tgz which is vulnerable to this CVE-2023-28155. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2023-28155 DESCRIPTION: Node.js Request module is vulnerab...
CVE-2024-44721
SeaCMS v13.1 was discovered to a Server-Side Request Forgery SSRF via the url parameter at /adminreslib.php...
CVE-2024-44721
SeaCMS v13.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the url parameter of the /admin_reslib.php endpoint. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields a base score of 9.8 (CRITICAL) with NETWORK attack, no authentication, and full impact on confidential...
CVE-2024-44721
SeaCMS v13.1 was discovered to a Server-Side Request Forgery SSRF via the url parameter at /adminreslib.php...
CVE-2024-40718
A server side request forgery vulnerability allows a low-privileged user to perform local privilege escalation through exploiting an SSRF vulnerability...
CVE-2024-40718
CVE-2024-40718 is an SSRF-based vulnerability that lets a low-privileged user escalate to the local system in Veeam products. Affected components include Veeam Backup & Replication (older 12.x builds like 12.1.2.172 and earlier), Veeam Agent for Linux (<= 6.2.0.101), Veeam ONE (12.1.x), Veeam ...
