Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2022-27245 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-27245)
SSRF in ssrf (CVE-2022-27245). Successful exploitation can lead to full system takeover.
|
| CVE-2021-42637 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2021-42637)
SSRF in ssrf (CVE-2021-42637). Successful exploitation can lead to full system takeover.
|
| CVE-2021-37223 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2021-37223)
SSRF in ssrf (CVE-2021-37223). Confidential information can be exposed externally.
|
| CVE-2017-17674 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-17674)
SSRF in ssrf (CVE-2017-17674). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15886 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-15886)
SSRF in ssrf (CVE-2017-15886). Confidential information can be exposed externally.
|
| CVE-2017-17697 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-17697)
SSRF in ssrf (CVE-2017-17697). Confidential information can be exposed externally.
|
| CVE-2017-16678 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-16678)
SSRF in ssrf (CVE-2017-16678). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15943 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-15943)
SSRF in ssrf (CVE-2017-15943). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11291 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-11291)
SSRF in ssrf (CVE-2017-11291). Confidential information can be exposed externally.
|
| CVE-2017-14585 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-14585)
SSRF in ssrf (CVE-2017-14585). Successful exploitation can lead to full system takeover.
|
| CVE-2017-4928 |
|
Cross-Site Request Forgery (CSRF) in ssrf (CVE-2017-4928)
vulnerability in ssrf (CVE-2017-4928). Confidential information can be exposed externally.
|
| CVE-2017-16870 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2017-16870)
SSRF in wordpress (CVE-2017-16870). Successful exploitation can lead to full system takeover.
|
| CVE-2017-0889 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-0889)
SSRF in ssrf (CVE-2017-0889). Successful exploitation can lead to full system takeover.
|
| CVE-2016-5002 |
|
XXE (XML External Entity) in apache (CVE-2016-5002)
vulnerability in apache (CVE-2016-5002). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15644 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-15644)
SSRF in ssrf (CVE-2017-15644). Confidential information can be exposed externally.
|
| CVE-2017-15280 |
|
XXE (XML External Entity) in ssrf (CVE-2017-15280)
vulnerability in ssrf (CVE-2017-15280). Confidential information can be exposed externally.
|
| CVE-2017-13706 |
|
XXE (XML External Entity) in ssrf (CVE-2017-13706)
vulnerability in ssrf (CVE-2017-13706). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14759 |
|
XXE (XML External Entity) in ssrf (CVE-2017-14759)
vulnerability in ssrf (CVE-2017-14759). Successful exploitation can lead to full system takeover.
|
| CVE-2017-7553 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-7553)
SSRF in ssrf (CVE-2017-7553). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12071 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-12071)
SSRF in ssrf (CVE-2017-12071). Confidential information can be exposed externally.
|
| CVE-2017-9458 |
|
XXE (XML External Entity) in ssrf (CVE-2017-9458)
vulnerability in ssrf (CVE-2017-9458). Successful exploitation can lead to full system takeover.
|
| CVE-2017-9506 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-9506)
SSRF in ssrf (CVE-2017-9506). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11149 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-11149)
SSRF in ssrf (CVE-2017-11149). Confidential information can be exposed externally.
|
| CVE-2017-11148 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-11148)
SSRF in ssrf (CVE-2017-11148). Confidential information can be exposed externally.
|
| CVE-2017-11457 |
|
XXE (XML External Entity) in ssrf (CVE-2017-11457)
vulnerability in ssrf (CVE-2017-11457). Confidential information can be exposed externally.
|
| CVE-2017-9413 |
|
Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attackers to hijack the authentication of users for requests that (1) subscribe to a po...
Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attackers to hijack the authentication of users for requests that (1) subscribe to a podcast via the add parameter to podcastReceiverAdmin.view or (2) update Internet Radio Settings via t...
|
| CVE-2016-6798 |
|
XXE (XML External Entity) in apache (CVE-2016-6798)
vulnerability in apache (CVE-2016-6798). Successful exploitation can lead to full system takeover.
|
| CVE-2017-10973 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-10973)
SSRF in ssrf (CVE-2017-10973). Data can be tampered with by attackers. Exploitable via `Host header`.
|
| CVE-2017-9355 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-9355)
SSRF in ssrf (CVE-2017-9355). Data can be tampered with by attackers.
|
| CVE-2017-9307 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-9307)
SSRF in ssrf (CVE-2017-9307). Confidential information can be exposed externally.
|
| CVE-2017-7503 |
|
XXE (XML External Entity) in ssrf (CVE-2017-7503)
vulnerability in ssrf (CVE-2017-7503). Successful exploitation can lead to full system takeover.
|
| CVE-2017-9066 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2017-9066)
SSRF in wordpress (CVE-2017-9066). Data can be tampered with by attackers.
|
| CVE-2017-8794 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-8794)
SSRF in ssrf (CVE-2017-8794). Confidential information can be exposed externally.
|
| CVE-2015-7570 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2015-7570)
SSRF in ssrf (CVE-2015-7570). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-7051 |
|
XXE (XML External Entity) in ssrf (CVE-2016-7051)
vulnerability in ssrf (CVE-2016-7051). Data can be tampered with by attackers.
|
| CVE-2017-7569 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-7569)
SSRF in ssrf (CVE-2017-7569). Data can be tampered with by attackers.
|
| CVE-2017-7566 |
|
MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism.
MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism.
|
| CVE-2017-6130 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-6130)
SSRF in ssrf (CVE-2017-6130). Data can be tampered with by attackers.
|
| CVE-2017-7272 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-7272)
SSRF in ssrf (CVE-2017-7272). Data can be tampered with by attackers.
|
| CVE-2017-7200 |
|
SSRF (Server-Side Request Forgery) in glance (CVE-2017-7200)
SSRF in glance (CVE-2017-7200). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.0.0a0` or later.
|
| CVE-2017-5617 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-5617)
SSRF in ssrf (CVE-2017-5617). Data can be tampered with by attackers.
|
| CVE-2017-5643 |
|
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.
|
| CVE-2015-8813 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2015-8813)
SSRF in ssrf (CVE-2015-8813). Data can be tampered with by attackers.
|
| CVE-2016-4312 |
|
XXE (XML External Entity) in ssrf (CVE-2016-4312)
vulnerability in ssrf (CVE-2016-4312). Successful exploitation can lead to full system takeover.
|
| CVE-2016-6001 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2016-6001)
SSRF in ssrf (CVE-2016-6001). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-9417 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2016-9417)
SSRF in ssrf (CVE-2016-9417). Data can be tampered with by attackers.
|
| CVE-2016-6621 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2016-6621)
SSRF in ssrf (CVE-2016-6621). Confidential information can be exposed externally.
|
| CVE-2016-7999 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2016-7999)
SSRF in ssrf (CVE-2016-7999). Data can be tampered with by attackers.
|
| CVE-2017-5518 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-5518)
SSRF in ssrf (CVE-2017-5518). Data can be tampered with by attackers.
|