Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 2 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Filtering by weakness Server-Side Request Forgery (SSRF)CWE-918 × clear

Debian Linux HIGH 7.5

CVE-2023-36661

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in…

Fix: 3.2.4+

Fix from $1,950 2023-06-25

Debian Linux CRITICAL 9.1

CVE-2022-26499EPSS 8%

An SSRF issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it's possible to send arbitrary requests (such as GET) to interfaces s…

Fix: 18.11.2+

Fix from $2,300 2022-04-15

Debian Linux HIGH 7.2

CVE-2021-21311 KEVEPSS 90%

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request for…

Fix: 4.7.9+

Fix from $1,950 2021-02-11

Debian Linux CRITICAL 10.0

CVE-2018-14721EPSS 10%

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure …

Fix: 2.6.7.2 / 2.7.9.5+

Fix from $2,300 2019-01-02

Debian Linux HIGH 7.4

CVE-2017-5617

The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF)…

Patch available

Fix from $1,950 2017-03-16