Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:918"
679 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-19375 |
low | 2.1 | 0.0045 | 2026-08-10 | A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the | |
CVE-2026-112288 |
low | 2.1 | 0.0022 | 2026-10-19 | Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users | |
CVE-2026-112297 |
low | 2.1 | 0.0031 | 2026-10-19 | A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the func | |
CVE-2026-8320 |
low | 2.0 | 0.0022 | 2026-05-11 | A security vulnerability has been detected in jishenghua jshERP up to 3.6. This affects the function | |
CVE-2026-18856 |
low | 2.0 | 0.0040 | 2026-08-05 | A vulnerability was determined in Poesis Rhymix CMS up to 2.1.33. This impacts the function procImpo | |
CVE-2026-5323 |
low | 1.9 | 0.0013 | 2026-04-02 | A vulnerability was found in priyankark a11y-mcp up to 1.0.5. This vulnerability affects the functio | |
CVE-2026-19337 |
low | 1.9 | 0.0017 | 2026-08-09 | A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown funct | |
CVE-2026-19369 |
low | 1.9 | 0.0015 | 2026-08-09 | A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of | |
CVE-2026-19373 |
low | 1.9 | 0.0017 | 2026-08-09 | A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue | |
CVE-2026-40072 |
low | 1.7 | 0.0023 | 2026-04-09 | web3.py allows you to interact with the Ethereum blockchain using Python. From 6.0.0b3 to before 7.1 | |
CVE-2026-19352 |
low | 1.3 | 0.0030 | 2026-08-09 | A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unk | |
CVE-2021-26855 |
— | — | — | — | KEV | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code executio |
CVE-2021-21975 |
— | — | — | — | KEV | Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malic |
CVE-2021-21985 |
— | — | — | — | KEV | VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health |
CVE-2021-22175 |
— | — | — | — | KEV | GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal net |
CVE-2021-34473 |
— | — | — | — | KEV | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code executio |
CVE-2021-40438 |
— | — | — | — | KEV | A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by |
CVE-2021-22054 |
— | — | — | — | KEV | Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request |
CVE-2024-21893 |
— | — | 1.0000 | — | KEV | Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivant |
CVE-2025-61884 |
— | — | 0.9589 | — | KEV | Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime c |
CVE-2026-41481 |
— | — | 0.0026 | 2026-04-24 | LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-s | |
CVE-2026-44578 |
— | — | 0.3554 | 2026-05-13 | Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.1 | |
CVE-2026-20230 |
— | — | 0.8820 | — | KEV | Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session M |
CVE-2026-48818 |
— | — | 0.0037 | 2026-06-17 | Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and earlier, StaticFiles on Win | |
CVE-2026-44016 |
— | — | 0.0059 | 2026-06-24 | Docling simplifies document processing by parsing diverse formats and providing integrations with th | |
CVE-2026-12992 |
— | — | 0.0034 | 2026-06-25 | A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without di | |
CVE-2026-83548 |
— | — | 0.0804 | — | KEV | SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a |
CVE-2026-96652 |
— | — | 0.0182 | — | KEV | Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an a |
CVE-2026-96655 |
— | — | 0.0164 | — | KEV | Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an au |