CVE-2024-51435

bloodbank A simple csrf poc found on blood bank system v 1.0...

CVE-2026-128065: grpc grpc-node: @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. From 1.14.0 through 1.14.1, XdsServer in @grpc/grpc-js-xds can acknowledge Route and VirtualHost resources while failing to apply their RBACPerRoute override configurations. The override parser is n...

CVE-2026-18546

IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or...

CVE-2026-18546

IBM CockroachDB PostgreSQL for IBM VPC versions 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 are vulnerable to server-side request forgery (SSRF) (CWE-918). This vulnerability allows an authenticated attacker to send unauthorized requests from the system, which could ...

EUVD-2026-119704

IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or...

CVE-2026-19128

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to send unauthorized requests from the system due to server-side request forgery. This could be used to enumerate network resources or to support further attacks...

CVE-2026-19128 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to send unauthorized requests from the system due to server-side request forgery. This could be used to enumerate network resources or to support further attacks...

EUVD-2026-118799

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to send unauthorized requests from the system due to server-side request forgery. This could be used to enumerate network resources or to support further attacks...

CVE-2026-19128

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are affected by multiple vulnerabilities that could allow an authenticated attacker to perform server-side request forgery (SSRF) . This flaw enables the attacker to send unauthorized requests from the system, which can be leveraged to enumerate ...

CVE-2026-19122 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated privileged attacker to send unauthorized requests from the system due to server-side request forgery. This could be used to enumerate network resources or to support further attacks...

CVE-2026-19122

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are affected by a Server-Side Request Forgery (SSRF) vulnerability. An authenticated privileged attacker can exploit this flaw to send unauthorized requests from the system, which may lead to the enumeration of network resources or facilitate fur...

EUVD-2026-116529

StorageGRID formerly StorageGRID Webscale versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests...

CVE-2026-22058

StorageGRID formerly StorageGRID Webscale versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests...

CVE-2026-22058

StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher are affected by an authentication bypass vulnerability. An attacker with product-specific knowledge and the ability to communicate with the Grid Network on specific ports can perform unauthorized requests . No specific details r...

CVE-2026-22058: NETAPP StorageGRID (formerly StorageGRID Webscale): StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge…

StorageGRID formerly StorageGRID Webscale versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests...

CVE-2026-5702

Cross-Site Request Forgery CSRF vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint...

CVE-2026-5702

The SABBATIC application is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CWE-352). This flaw allows an attacker to trick an authenticated user into interacting with a malicious link or page, which then sends unauthorized requests to a vulnerable endpoint. No specific technical r...

EUVD-2026-112743

Cross-Site Request Forgery CSRF vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint...

CVE-2026-5702 Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application

Cross-Site Request Forgery CSRF vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint...

CVE-2026-5702 Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application

Cross-Site Request Forgery CSRF vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint...