Sign in Sign up
JA · EN · FR
SecPulse

Cwe 918

🧬 CWE Related 1,775
slug: cwe-918

No explanation yet for this tag.

🔖 Related tags

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 202856 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799

🛡 Vulnerabilities tagged with this 1,776

Image ID Title
CVE-2026-100861 heym before 0.0.105 fails to apply egress guards to integration services that use credential-supplied base URLs…
CVE-2026-100859 Heym before 0.0.106 contains a credential exfiltration vulnerability in the POST /api/credentials/test endpoint that…
CVE-2026-100850 AzuraCast before 0.23.8 contains a server-side request forgery and local file read vulnerability in the AutoDJ remote…
CVE-2026-100848 AzuraCast (Composer package azuracast/azuracast) before 0.23.8 validates a station's "Remote Relay" URL only for URL…
CVE-2026-100849 AzuraCast is a self-hosted web radio management suite. In AzuraCast before 0.23.8, the station webhook URL validation…
CVE-2026-100705 Kyverno before 1.19.1 is vulnerable to server-side request forgery. The default egress blocklist (169.254.169.254…
CVE-2026-100697 Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin (plugins/drivers/clickhouse.php, rewritten in…
CVE-2026-100696 Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery (SSRF) vulnerability in the…
CVE-2026-100698 Adminer 5.5.1 through 6.0.1 improperly parses the login 'server' string in the host_port() function in…
CVE-2026-100681 Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential...
CVE-2026-100601 ClawHub (openclaw/clawhub) application/backend contains a server-side request forgery vulnerability in the public…
CVE-2026-96533 SSRF (Server-Side Request Forgery) in WordPress (CVE-2026-96533)
CVE-2026-100576 OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser...
CVE-2026-100577 OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-side…
CVE-2026-100574 OpenClaw (npm package 'openclaw') before 2026.8.1 contains a server-side request forgery vulnerability in its…
CVE-2026-100567 OpenClaw is an agent gateway distributed as the npm package 'openclaw'. In versions >= 2026.4.5 and < 2026.8.1, the…
CVE-2026-100555 OpenClaw is an npm-distributed gateway application. In versions >= 2026.7.1 and < 2026.8.1,...
CVE-2026-100391 MediaFlow Proxy through 2.4.9 contains a server-side request forgery vulnerability in the /proxy...
CVE-2026-100373 OpenMetadata through 2.0.2 contains a server-side request forgery vulnerability in the URLValidator.validateURL…
CVE-2026-56734 Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, during federated authentication…
CVE-2026-51772 A Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack Glance. When the…
CVE-2026-51773 An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a…
CVE-2026-12037 SSRF (Server-Side Request Forgery) in WordPress (CVE-2026-12037)
CVE-2026-78397 SSRF (Server-Side Request Forgery) in WordPress (CVE-2026-78397)
CVE-2026-97326 A weakness has been identified in songxinjianqwe Chat up to ac63d25297079eed5e4ba7e88d3b7a032637150d. Affected by this…
CVE-2026-97320 A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function…
CVE-2026-96747 Vulnerability in pymongo (CVE-2026-96747)
CVE-2026-85738 TREK is a collaborative travel planner. Prior to 3.4.0, the checkSsrf logic in server/src/utils/ssrfGuard.ts does not…
CVE-2026-77294 TREK is a collaborative travel planner. Prior to 3.3.0, TREK allows an authenticated user to store an…
CVE-2026-79764 Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From…

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details