Kritisch
CVE-2026-26030
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 6.861
Filter zurücksetzen
Mittel
CVE-2026-25739
Indico Affected by Cross-Site-Scripting via material uploads
Mittel
CVE-2026-25738
Indico has Server-Side Request Forgery (SSRF) in multiple places
Mittel
CVE-2026-25527
changedetection.io is vulnerable to unauthenticated static path traversal
Mittel
CVE-2026-24126
Weblate has an argument injection in management console
Kritisch
CVE-2025-14009
NLTK has a Zip Slip Vulnerability
Hoch
CVE-2026-2653
A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of the file src/normals.c. Performing a manipulation results in heap-based buffer ov
Hoch
CVE-2026-25087
Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering
Mittel
CVE-2026-2415
Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name}
Hoch
CVE-2026-2531
A security vulnerability has been detected in MindsDB up to 25.14.1. This vulnerability affects the function clear_filename of the file mindsdb/utilities/security.py of the component File Upload. Such
Mittel
ghsa-27jp-wm6q-gp25
sqlparse: formatting list of tuples leads to denial of service
Mittel
CVE-2025-33042
Apache Avro Java SDK is Vulnerable to Code Injection
Mittel
CVE-2019-25338
DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames t
Kritisch
CVE-2026-26217
Crawl4AI Has Local File Inclusion in Docker API via file:// URLs
Kritisch
CVE-2026-26216
Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter
Hoch
CVE-2026-25990
Pillow affected by out-of-bounds write when loading PSD images
Hoch
CVE-2026-26007
cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
Kritisch
CVE-2026-21531
Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE
Mittel
CVE-2026-25528
LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection
Mittel
CVE-2026-25480
Litestar's FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)
Mittel
CVE-2026-25479
Litestar's AllowedHosts has a validation bypass due to unescaped regex metacharacters in configured host patterns
Hoch
CVE-2026-25478
Litestar's CORS origin allowlist has a bypass due to unescaped regex metacharacters in allowed origins
Mittel
CVE-2026-24098
Apache Airflow UI Exposes DAG Import Errors to Unauthorized Authenticated Users
Mittel
CVE-2026-22922
Apache Airflow Has an Authorization Bypass That Allows Unauthorized Task Log Access
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.