Connexion Inscription
JA · EN · FR
SecPulse

Cwe 918

🧬 CWE Liées 1,775
slug: cwe-918

Pas encore d'explication pour cette étiquette.

🔖 Étiquettes liées

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 202856 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799

🛡 Vulnérabilités associées 1,776

Image ID Titre
CVE-2026-76728 A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated...
CVE-2026-102877 Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL…
CVE-2026-102879 ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download_file and scrape_web…
CVE-2026-100297 In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe…
CVE-2026-102722 In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply. Validation only…
CVE-2026-92222 SSRF (Falsification de requête côté serveur) dans Joomla (CVE-2026-92222)
CVE-2026-102244 A security flaw has been discovered in MODSetter SurfSense up to 0.0.36. Impacted is an unknown function of the file…
CVE-2026-102267 Divulgation d'information dans PyJWT (CVE-2026-102267)
CVE-2026-55160 Stringer is a self-hosted, anti-social RSS reader. Prior to commit 75cb095, an unrestricted Server-Side Request Forgery…
CVE-2026-101913 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.5.1, the…
CVE-2026-101910 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.2.0 until 10.5.1…
CVE-2026-101898 Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup…
CVE-2026-55096 fast-mcp-telegram is a Telegram MCP Server. Prior to version 30.1, the send_message/send_message_to_phone MCP tools…
CVE-2026-82375 SSRF (Falsification de requête côté serveur) dans Apache (CVE-2026-82375)
CVE-2026-101005 A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the…
CVE-2026-100750 Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro…
CVE-2026-100909 A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function…
CVE-2026-100900 A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. Affected is the…
CVE-2026-100901 A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. Affected by this vulnerability is the function…
CVE-2026-100893 A vulnerability was determined in Privoce VoceChat Server up to 0.5.36. This vulnerability affects the function…
CVE-2026-101087 Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to validate user-configurable notification and DDNS…
CVE-2026-101064 Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows…
CVE-2026-101061 utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to…
CVE-2026-101060 python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in…
CVE-2026-101059 utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications, allowing…
CVE-2026-101058 python-utcp (pip package utcp-http) before 1.1.12 does not verify whether tool URLs declared in a hand-written UTCP…
CVE-2026-89003 SSRF (Falsification de requête côté serveur) dans WordPress (CVE-2026-89003)
CVE-2026-89000 SSRF (Falsification de requête côté serveur) dans WordPress (CVE-2026-89000)
CVE-2026-100863 Heym versions 0.0.90 and earlier contain two server-side request forgery (SSRF) egress gaps, both remediated in…
CVE-2026-100858 heym before 0.0.109 contains a server-side request forgery vulnerability in the Slack, Discord, and Crawler workflow…

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus