Hoch
CVE-2026-35397
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 6.861
Filter zurücksetzen
Kritisch
CVE-2026-42196
django-s3file is vulnerable to relative path traversal
Kritisch
CVE-2026-27960
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalation vulnerability that can be exploit
Kritisch
CVE-2026-42048
Langflow Knowledge Bases API is Vulnerable to Path Traversal
Kritisch
CVE-2026-42864
FireFighter has unauthenticated SSRF in its Raid jira_bot endpoint that allows IAM credential theft
Kritisch
CVE-2026-25660
Codechecker has an authentication bypass for certain API calls
Niedrig
CVE-2026-6907
Django Uses Cache Containing Sensitive Information
Mittel
CVE-2026-5766
Django has an Improper Handling of Length Parameter Inconsistency
Niedrig
CVE-2026-35192
Django Uses Persistent Cookies Containing Sensitive Information
Mittel
CVE-2025-61669
Jupyter Server has an open redirection vulnerability in `next` query parameter
Mittel
ghsa-8pqq-224h-x875
ogham-mcp had credentials embedded in published PyPI sdists -- Neon postgres URLs and Voyage API key
Hoch
CVE-2026-42088
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0-rc3, the Script Runner widget allows users to execute Pyt
Kritisch
CVE-2026-42087
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 to before version 7.0.0-rc3, a SQL injection vulnerability ex
Hoch
CVE-2026-42084
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, the OpenC3 password change functionality
Mittel
CVE-2026-42085
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, OpenC3 COSMOS contains a design flaw in
Mittel
CVE-2026-42086
OpenC3 COSMOS is Vulnerable to Self-XSS Through the Command Sender
Hoch
CVE-2026-7579
AstrBot Makes Use of Hard-coded Password
Hoch
CVE-2026-43001
OpenStack Keystone has an Incorrect Authorization Issue
Hoch
CVE-2026-43003
OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere
Kritisch
CVE-2026-42354
Sentry's improper authentication on SAML SSO process allows user identity linking
Hoch
CVE-2026-40171
Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS
Mittel
CVE-2026-41016
apache-airflow-providers-smtp: No certificate validation on SMTP STARTTLS connections in SMTP provider
Kritisch
CVE-2026-24178
NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A succe
Niedrig
CVE-2026-7141
vLLM makes Use of Uninitialized Resource
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.