Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: ssrf Clear
ID Title
CVE-2022-27245 SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-27245)
SSRF in ssrf (CVE-2022-27245). Successful exploitation can lead to full system takeover.
CVE-2021-42637 SSRF (Server-Side Request Forgery) in ssrf (CVE-2021-42637)
SSRF in ssrf (CVE-2021-42637). Successful exploitation can lead to full system takeover.
CVE-2021-37223 SSRF (Server-Side Request Forgery) in ssrf (CVE-2021-37223)
SSRF in ssrf (CVE-2021-37223). Confidential information can be exposed externally.
CVE-2017-17674 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-17674)
SSRF in ssrf (CVE-2017-17674). Successful exploitation can lead to full system takeover.
CVE-2017-15886 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-15886)
SSRF in ssrf (CVE-2017-15886). Confidential information can be exposed externally.
CVE-2017-17697 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-17697)
SSRF in ssrf (CVE-2017-17697). Confidential information can be exposed externally.
CVE-2017-16678 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-16678)
SSRF in ssrf (CVE-2017-16678). Risk of unauthorized operations or information disclosure.
CVE-2017-15943 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-15943)
SSRF in ssrf (CVE-2017-15943). Risk of unauthorized operations or information disclosure.
CVE-2017-11291 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-11291)
SSRF in ssrf (CVE-2017-11291). Confidential information can be exposed externally.
CVE-2017-14585 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-14585)
SSRF in ssrf (CVE-2017-14585). Successful exploitation can lead to full system takeover.
CVE-2017-4928 Cross-Site Request Forgery (CSRF) in ssrf (CVE-2017-4928)
vulnerability in ssrf (CVE-2017-4928). Confidential information can be exposed externally.
CVE-2017-16870 SSRF (Server-Side Request Forgery) in wordpress (CVE-2017-16870)
SSRF in wordpress (CVE-2017-16870). Successful exploitation can lead to full system takeover.
CVE-2017-0889 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-0889)
SSRF in ssrf (CVE-2017-0889). Successful exploitation can lead to full system takeover.
CVE-2016-5002 XXE (XML External Entity) in apache (CVE-2016-5002)
vulnerability in apache (CVE-2016-5002). Successful exploitation can lead to full system takeover.
CVE-2017-15644 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-15644)
SSRF in ssrf (CVE-2017-15644). Confidential information can be exposed externally.
CVE-2017-15280 XXE (XML External Entity) in ssrf (CVE-2017-15280)
vulnerability in ssrf (CVE-2017-15280). Confidential information can be exposed externally.
CVE-2017-13706 XXE (XML External Entity) in ssrf (CVE-2017-13706)
vulnerability in ssrf (CVE-2017-13706). Successful exploitation can lead to full system takeover.
CVE-2017-14759 XXE (XML External Entity) in ssrf (CVE-2017-14759)
vulnerability in ssrf (CVE-2017-14759). Successful exploitation can lead to full system takeover.
CVE-2017-7553 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-7553)
SSRF in ssrf (CVE-2017-7553). Risk of unauthorized operations or information disclosure.
CVE-2017-12071 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-12071)
SSRF in ssrf (CVE-2017-12071). Confidential information can be exposed externally.
CVE-2017-9458 XXE (XML External Entity) in ssrf (CVE-2017-9458)
vulnerability in ssrf (CVE-2017-9458). Successful exploitation can lead to full system takeover.
CVE-2017-9506 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-9506)
SSRF in ssrf (CVE-2017-9506). Risk of unauthorized operations or information disclosure.
CVE-2017-11149 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-11149)
SSRF in ssrf (CVE-2017-11149). Confidential information can be exposed externally.
CVE-2017-11148 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-11148)
SSRF in ssrf (CVE-2017-11148). Confidential information can be exposed externally.
CVE-2017-11457 XXE (XML External Entity) in ssrf (CVE-2017-11457)
vulnerability in ssrf (CVE-2017-11457). Confidential information can be exposed externally.
CVE-2017-9413 Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attackers to hijack the authentication of users for requests that (1) subscribe to a po...
Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attackers to hijack the authentication of users for requests that (1) subscribe to a podcast via the add parameter to podcastReceiverAdmin.view or (2) update Internet Radio Settings via t...
CVE-2016-6798 XXE (XML External Entity) in apache (CVE-2016-6798)
vulnerability in apache (CVE-2016-6798). Successful exploitation can lead to full system takeover.
CVE-2017-10973 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-10973)
SSRF in ssrf (CVE-2017-10973). Data can be tampered with by attackers. Exploitable via `Host header`.
CVE-2017-9355 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-9355)
SSRF in ssrf (CVE-2017-9355). Data can be tampered with by attackers.
CVE-2017-9307 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-9307)
SSRF in ssrf (CVE-2017-9307). Confidential information can be exposed externally.
CVE-2017-7503 XXE (XML External Entity) in ssrf (CVE-2017-7503)
vulnerability in ssrf (CVE-2017-7503). Successful exploitation can lead to full system takeover.
CVE-2017-9066 SSRF (Server-Side Request Forgery) in wordpress (CVE-2017-9066)
SSRF in wordpress (CVE-2017-9066). Data can be tampered with by attackers.
CVE-2017-8794 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-8794)
SSRF in ssrf (CVE-2017-8794). Confidential information can be exposed externally.
CVE-2015-7570 SSRF (Server-Side Request Forgery) in ssrf (CVE-2015-7570)
SSRF in ssrf (CVE-2015-7570). Risk of unauthorized operations or information disclosure.
CVE-2016-7051 XXE (XML External Entity) in ssrf (CVE-2016-7051)
vulnerability in ssrf (CVE-2016-7051). Data can be tampered with by attackers.
CVE-2017-7569 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-7569)
SSRF in ssrf (CVE-2017-7569). Data can be tampered with by attackers.
CVE-2017-7566 MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism.
MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism.
CVE-2017-6130 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-6130)
SSRF in ssrf (CVE-2017-6130). Data can be tampered with by attackers.
CVE-2017-7272 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-7272)
SSRF in ssrf (CVE-2017-7272). Data can be tampered with by attackers.
CVE-2017-7200 SSRF (Server-Side Request Forgery) in glance (CVE-2017-7200)
SSRF in glance (CVE-2017-7200). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.0a0` or later.
CVE-2017-5617 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-5617)
SSRF in ssrf (CVE-2017-5617). Data can be tampered with by attackers.
CVE-2017-5643 Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.
CVE-2015-8813 SSRF (Server-Side Request Forgery) in ssrf (CVE-2015-8813)
SSRF in ssrf (CVE-2015-8813). Data can be tampered with by attackers.
CVE-2016-4312 XXE (XML External Entity) in ssrf (CVE-2016-4312)
vulnerability in ssrf (CVE-2016-4312). Successful exploitation can lead to full system takeover.
CVE-2016-6001 SSRF (Server-Side Request Forgery) in ssrf (CVE-2016-6001)
SSRF in ssrf (CVE-2016-6001). Risk of unauthorized operations or information disclosure.
CVE-2016-9417 SSRF (Server-Side Request Forgery) in ssrf (CVE-2016-9417)
SSRF in ssrf (CVE-2016-9417). Data can be tampered with by attackers.
CVE-2016-6621 SSRF (Server-Side Request Forgery) in ssrf (CVE-2016-6621)
SSRF in ssrf (CVE-2016-6621). Confidential information can be exposed externally.
CVE-2016-7999 SSRF (Server-Side Request Forgery) in ssrf (CVE-2016-7999)
SSRF in ssrf (CVE-2016-7999). Data can be tampered with by attackers.
CVE-2017-5518 SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-5518)
SSRF in ssrf (CVE-2017-5518). Data can be tampered with by attackers.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →