Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:918"
686 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-56779 |
medium | 5.3 | 0.0029 | 2026-06-25 | MaxKB before 2.10.0 contains a server-side request forgery vulnerability in tool creation and update | |
CVE-2026-15189 |
medium | 5.3 | 0.0026 | 2026-07-09 | A security vulnerability has been detected in aerostackdev aerostack-mcp up to 6315dfde7df0a15aaf743 | |
CVE-2026-49969 |
medium | 5.3 | 0.0042 | 2026-07-13 | Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows remot | |
CVE-2026-7494 |
medium | 5.3 | 0.0019 | 2026-07-14 | Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retri | |
CVE-2026-63730 |
medium | 5.3 | 0.0040 | 2026-07-20 | HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authenticated | |
CVE-2026-64626 |
medium | 5.3 | 0.0023 | 2026-07-20 | AVideo versions from commit 0dbadbca through latest master contain a server-side request forgery vul | |
CVE-2026-64870 |
medium | 5.3 | 0.0036 | 2026-07-30 | MaxKB is an open-source AI assistant for enterprise. In versions 2.0.0 through 2.10.4-lts, UpdateSto | |
CVE-2026-59231 |
medium | 5.3 | 0.0045 | 2026-07-31 | Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows au | |
CVE-2026-18736 |
medium | 5.3 | 0.0033 | 2026-08-03 | Shlink contains a server-side request forgery vulnerability that allows authenticated API key holder | |
CVE-2026-76239 |
medium | 5.3 | 0.0032 | 2026-08-19 | Stigmem before 0.9.0a11 fails to validate the delivery_address parameter when creating webhook subsc | |
CVE-2026-54494 |
medium | 5.3 | 0.0043 | 2026-08-19 | Koel is a free, open-source music streaming solution. Prior to 9.7.1, App\Helpers\Network::isPublicH | |
CVE-2026-72846 |
medium | 5.3 | 0.0032 | 2026-08-20 | Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendW | |
CVE-2026-88892 |
medium | 5.3 | 0.0033 | 2026-09-10 | In OpenPanel through 2.3.0, the data importer fetches a caller-supplied URL with plain fetch instead | |
CVE-2026-110610 |
medium | 5.3 | 0.0034 | 2026-10-14 | ruoyi-vue-pro through 2026.09 contains a server-side request forgery vulnerability in the yudao-modu | |
CVE-2026-111936 |
medium | 5.3 | 0.0026 | 2026-10-19 | Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because valida | |
CVE-2026-114634 |
medium | 5.3 | 0.0025 | 2026-10-22 | WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderCon | |
CVE-2026-115411 |
medium | 5.3 | 0.0028 | 2026-10-22 | crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler en | |
CVE-2026-116182 |
medium | 5.3 | 0.0020 | 2026-10-25 | phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export featur | |
CVE-2026-116056 |
medium | 5.3 | 0.0036 | 2026-10-25 | A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function request_url_safe | |
CVE-2026-116224 |
medium | 5.3 | 0.0023 | 2026-10-26 | A vulnerability has been found in fr0tt benotes up to 2.8.1. This affects the function getUrlInfo of | |
CVE-2026-115720 |
medium | 5.3 | 0.0034 | 2026-10-26 | Frappe Builder before 1.36.1 contains a server-side request forgery vulnerability in builder/api.py | |
CVE-2026-113688 |
medium | 5.3 | — | 2026-10-29 | Server-side request forgery in the SmartIT URL-based attachment feature of BMC IT Service Management | |
CVE-2026-49859 |
medium | 5.2 | 0.0014 | 2026-06-23 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, when fetch() was called, | |
CVE-2026-49860 |
medium | 5.2 | 0.0014 | 2026-06-23 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, when a WebSocket connecti | |
CVE-2026-42213 |
medium | 5.1 | 0.0056 | 2026-05-08 | SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE for SolidCA | |
CVE-2026-3048 |
medium | 5.1 | 0.0017 | 2026-05-11 | An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repositor | |
CVE-2026-49979 |
medium | 5.1 | 0.0037 | 2026-06-24 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.99, the POS | |
CVE-2026-54430 |
medium | 5.1 | 0.0017 | 2026-07-02 | liboauth2 is vulnerable to Server-Side Request Forgery in oauth2_jose_jwks_aws_alb_resolve() functio | |
CVE-2026-14645 |
medium | 5.1 | 0.0036 | 2026-07-14 | Nexus Repository 3 does not validate the destination of the "Webhook: Global" capability's configure | |
CVE-2026-62226 |
medium | 5.1 | 0.0033 | 2026-07-17 | OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act | |
CVE-2026-60033 |
medium | 5.1 | 0.0039 | 2026-07-20 | Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.0 - The Jooml | |
CVE-2026-73210 |
medium | 5.1 | 0.0047 | 2026-08-11 | A Server-Side Request Forgery (SSRF) vulnerability existed in Lookyloo's PlaywrightCapture when the | |
CVE-2026-64968 |
medium | 5.1 | 0.0040 | 2026-08-20 | ATutor is vulnerable to Server-Side request forgery in import functionalities. An authenticated admi | |
CVE-2026-110225 |
medium | 5.1 | 0.0034 | 2026-10-13 | Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticate | |
CVE-2026-116280 |
medium | 5.1 | 0.0016 | 2026-10-26 | A vulnerability was determined in Kameleo up to 5.0.1.26. Affected is the function InternalControlle | |
CVE-2026-118989 |
medium | 5.1 | — | 2026-10-29 | WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request fo | |
CVE-2026-35516 |
medium | 5.0 | 0.0027 | 2026-04-07 | LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository::update an | |
CVE-2026-33440 |
medium | 5.0 | 0.0024 | 2026-04-15 | Weblate is a web based localization tool. In versions prior to 5.17, the ALLOWED_ASSET_DOMAINS setti | |
CVE-2026-34244 |
medium | 5.0 | 0.0025 | 2026-04-15 | Weblate is a web based localization tool. In versions prior to 5.17, a user with the project.edit pe | |
CVE-2026-43979 |
medium | 5.0 | 0.0033 | 2026-05-28 | Local Deep Research is an AI-powered research assistant for deep, iterative research. Prior to 1.6.0 | |
CVE-2026-46526 |
medium | 5.0 | 0.0030 | 2026-05-28 | Local Deep Research is an AI-powered research assistant for deep, iterative research. Prior to 1.6.1 | |
CVE-2026-28385 |
medium | 5.0 | 0.0028 | 2026-06-26 | In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery (SSRF) vulnerability in th | |
CVE-2026-44936 |
medium | 5.0 | 0.0035 | 2026-07-06 | Missing filtering when the helmRepoURLRegex field isn't set on a GitRepo resource in SUSE Rancher Fl | |
CVE-2026-20314 |
medium | 5.0 | 0.0044 | 2026-08-19 | A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact | |
CVE-2026-78850 |
medium | 5.0 | 0.0033 | 2026-10-15 | An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteCon | |
CVE-2026-102590 |
medium | 5.0 | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitiv | |
CVE-2026-31955 |
medium | 4.9 | 0.0028 | 2026-04-24 | Xibo is an open source digital signage platform with a web content management system and Windows dis | |
CVE-2026-41887 |
medium | 4.9 | 0.0047 | 2026-05-08 | Flarum is open-source forum software. Prior to versions 1.8.16 and 2.0.0-rc.1, Flarum's patch for CV | |
CVE-2026-57627 |
medium | 4.9 | 0.0019 | 2026-06-26 | Subscriber Server Side Request Forgery (SSRF) in Kirki <= 6.0.11 versions. | |
CVE-2026-42147 |
medium | 4.9 | 0.0032 | 2026-07-07 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. |