Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 7.072
Filter zurücksetzenhsweb-framework has a Path Traversal issue
Keycloak: Information disclosure due to user profile permission bypass
Apache Fory Java SDK Has Deserialization of Untrusted Data in the Java replace-resolve path
epa4all-client: Unauthenticated REST API for Patient Record Writes
Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass
Apache Calcite is Vulnerable to Use of Externally-Controlled Input to Select Classes
Spring Cloud Function Context has Uncontrolled Recursion
Spring Cloud Function Context: Uncontrolled Recursion is possible while attempting to add infinite amount of functions to Function Registry
Logback vulnerable to Object Injection through HardenedObjectInputStream modules
Apache Fesod is vulnerable to Server-Side Request Forgery through its UrlImageConverter component
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability
Apache MINA SSHD bundle sshd-git has a path traversal vulnerability
Apache ActiveMQ server has an incomplete authorization workflow
Apache ActiveMQ has an Incorrect Default Permissions vulnerability
Apache Fluss: Unauthenticated remote attackers can exhaust JVM heap memory using crafted frame headers via TabletServer/CoordinatorServer
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
Apache Solr has hardcoded credentials in the Basic Authentication setup tool
Apache ActiveMQ, Apache ActiveMQ Web have a Cross-site Scripting issue
Apache Directory LDAP API lacks server certificate verification for LDAP hostnames
CC-Tweaked has an SSRF Protection Bypass with NAT64
Apache Artemis has an Incorrect Authorization issue
QOS.CH Sarl logback logback-core has a deserialization of untrusted data vulnerability
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.