Vulnerabilities (CVE)

Filtered by CWE-184
Total 42 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-0909 1 Private Address Check Project 1 Private Address Check 2019-10-09 7.5 HIGH 9.8 CRITICAL
The private_address_check ruby gem before 0.4.1 is vulnerable to a bypass due to an incomplete blacklist of common private/local network addresses used to prevent server-side request forgery.
CVE-2015-5946 1 Sugarcrm 1 Sugarcrm 2017-08-15 4.6 MEDIUM 7.8 HIGH
Incomplete blacklist vulnerability in SuiteCRM 7.2.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension.