13553 matches found
PT-2024-25359 · Basepress · Basepress
Name of the Vulnerable Software and Affected Versions: Knowledge Base documentation & wiki plugin – BasePress versions n/a through 2.16.1 Description: The issue is a Server-Side Request Forgery SSRF vulnerability. This type of vulnerability allows an attacker to trick the server into making...
CVE-2024-33449
An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST request in the url parameter...
Google Doc Embedder <= 2.6.4 - Authenticated (Contributor+) Blind Server Side Request Forgery
Description The Google Doc Embedder plugin for WordPress is vulnerable to Server Side Request Forgery via the 'gview' shortcode in versions up to, and including, 2.6.4. This can allow authenticated attackers with contributor-level permissions or above to make web requests to arbitrary locations...
NextChat < 2.11.3 SSRF
Binary data nextchatCVE-2023-49785.nbin...
RHEL 8 : Satellite 6.14 (RHSA-2023:6818)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6818 advisory. Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring...
The Pack Elementor addons (Header Footer & WooCommerce Builder, Template Library) < 2.0.8.3 - Authenticated (Subscriber+) Server-Side Request Forgery
Description The The Pack Elementor addons Header Footer & WooCommerce Builder, Template Library plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.8.2. This makes it possible for authenticated attackers, with subscriber-level access and...
CVE-2024-33449
An SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information and execute arbitrary code via a POST request in the url parameter...
RHEL 7 : rh-maven35-jackson-databind (RHSA-2019:0782)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0782 advisory. The jackson-databind package provides general data-binding functionality for Jackson, which works on top of Jackson core streaming API...
RHEL 8 / 9 : OpenShift Container Platform 4.12.0 (RHSA-2022:7398)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7398 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...
CVE-2024-33592 WordPress Radio Player plugin <= 2.0.73 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...
CVE-2024-33592
CVE-2024-33592: SSRF in the SoftLab Radio Player WordPress plugin (Radio Player) affects versions up to 2.0.73. Public references confirm an SSRF issue; the vulnerability has been patched in a later release. No exploit details are provided in the available documents. If you use Radio Player, veri...
WordPress Auto Featured Image (Auto Post Thumbnail) Plugin <= 4.1.3 is vulnerable to Server Side Request Forgery (SSRF)
Software Auto Featured Image Auto Post Thumbnail Type Plugin Vulnerable versions = 4.1.3 Fixed in 4.1.4 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-33629 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID...
WordPress Absolutely Glamorous Custom Admin Plugin <= 7.2.3 is vulnerable to Server Side Request Forgery (SSRF)
Software Absolutely Glamorous Custom Admin Type Plugin Vulnerable versions = 7.2.3 Fixed in 7.2.4 OWASP Top 10 A4: Insecure Design Classification Server Side Request Forgery SSRF CVE CVE-2024-33627 Patch priority Low CVSS severity Low 4.4 Developer Cusmin PSID aca8f3a66d97 Credits emad Required...
WordPress Radio Player Plugin <= 2.0.73 is vulnerable to Server Side Request Forgery (SSRF)
Software Radio Player Type Plugin Vulnerable versions = 2.0.73 Fixed in 2.0.74 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-33592 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 3f8d09f6ac4f Credits Steven...
Server-Side Request Forgery (SSRF)
github.com/usememos/memos is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper validation of user input at the /api/resource endpoint, allowing authenticated users to send crafted requests and perform Server-Side Request Forgery SSRF to enumerate the internal...
CVE-2024-32812
Server-Side Request Forgery SSRF vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.11...
CVE-2024-32775
Server-Side Request Forgery SSRF vulnerability in Pavex Embed Google Photos album.This issue affects Embed Google Photos album: from n/a through 2.1.9...
CVE-2024-32718
Server-Side Request Forgery SSRF vulnerability in Webangon The Pack Elementor.This issue affects The Pack Elementor addons: from n/a through 2.0.8.2...