Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (1734 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-0591 1 Subtlewebinc 1 Formcraft3 2024-11-21 9.1 Critical
The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users
CVE-2022-0528 1 Transloadit 1 Uppy 2024-11-21 6.5 Medium
Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1.
CVE-2022-0508 1 Framasoft 1 Peertube 2024-11-21 5.3 Medium
Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832
CVE-2022-0425 1 Gitlab 1 Gitlab 2024-11-21 5.4 Medium
A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to trigger Server Side Request Forgery (SSRF) attacks.
CVE-2022-0339 1 Janeczku 1 Calibre-web 2024-11-21 9.8 Critical
Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16.
CVE-2022-0249 1 Gitlab 1 Gitlab 2024-11-21 3.1 Low
A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since requests to shared address space were not blocked.
CVE-2022-0136 1 Gitlab 1 Gitlab 2024-11-21 5.4 Medium
A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1. GitLab was vulnerable to a blind SSRF attack through the Project Import feature.
CVE-2022-0132 1 Framasoft 1 Peertube 2024-11-21 7.5 High
peertube is vulnerable to Server-Side Request Forgery (SSRF)
CVE-2022-0086 1 Transloadit 1 Uppy 2024-11-21 9.8 Critical
uppy is vulnerable to Server-Side Request Forgery (SSRF)
CVE-2022-0085 1 Dompdf Project 1 Dompdf 2024-11-21 5.3 Medium
Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0.
CVE-2021-4075 1 Snipeitapp 1 Snipe-it 2024-11-21 7.2 High
snipe-it is vulnerable to Server-Side Request Forgery (SSRF)
CVE-2021-46107 1 Ligeo-archives 1 Ligeo Basics 2024-11-21 7.5 High
Ligeo Archives Ligeo Basics as of 02_01-2022 is vulnerable to Server Side Request Forgery (SSRF) which allows an attacker to read any documents via the download features.
CVE-2021-45968 2 Jivesoftware, Pascom 2 Jive, Cloud Phone System 2024-11-21 7.5 High
An issue was discovered in xmppserver jar in the XMPP Server component of the JIve platform, as used in Pascom Cloud Phone System before 7.20.x (and in other products). An endpoint in the backend Tomcat server of the Pascom allows SSRF, a related issue to CVE-2019-18394.
CVE-2021-45851 1 Frangoteam 1 Fuxa 2024-11-21 7.5 High
A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the server's internal environment and services, often potentially leading to the attacker executing commands on the server.
CVE-2021-45394 1 Html2pdf Project 1 Html2pdf 2024-11-21 8.8 High
An issue was discovered in Spipu HTML2PDF before 5.2.4. Attackers can trigger deserialization of arbitrary data via the injection of a malicious <link> tag in the converted HTML document.
CVE-2021-45325 1 Gitea 1 Gitea 2024-11-21 7.5 High
Server Side Request Forgery (SSRF) vulneraility exists in Gitea before 1.7.0 using the OpenID URL.
CVE-2021-44659 1 Thoughtworks 1 Gocd 2024-11-21 9.8 Critical
Adding a new pipeline in GoCD server version 21.3.0 has a functionality that could be abused to do an un-intended action in order to achieve a Server Side Request Forgery (SSRF). NOTE: the vendor's position is that the observed behavior is not a vulnerability, because the product's design allows an admin to configure outbound requests
CVE-2021-44224 7 Apache, Apple, Debian and 4 more 15 Http Server, Mac Os X, Macos and 12 more 2024-11-21 8.2 High
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).
CVE-2021-44139 1 Hashicorp 1 Sentinel 2024-11-21 7.5 High
Sentinel 1.8.2 is vulnerable to Server-side request forgery (SSRF).
CVE-2021-43959 1 Atlassian 2 Jira Service Desk, Jira Service Management 2024-11-21 5.7 Medium
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to access the content of internal network resources via a Server-Side Request Forgery (SSRF) vulnerability in the CSV importing feature of JSM Insight. When running in an environment like Amazon EC2, this flaw may be used to access to a metadata resource that provides access credentials and other potentially confidential information. The affected versions are before version 4.13.20, from version 4.14.0 before 4.20.8, and from version 4.21.0 before 4.22.2.