Vulnerabilities (CVE)

Filtered by CWE-918
Total 2703 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-6758 1 Sencha 1 Ext Js 2026-06-16 5.0 MEDIUM 7.5 HIGH
Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0.
CVE-2004-2061 1 Risearch 2 Risearch, Risearch Pro 2026-06-16 7.5 HIGH 9.8 CRITICAL
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.
CVE-2002-1484 1 Siemens 1 Db4web 2026-06-16 7.5 HIGH 9.8 CRITICAL
DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error message.