Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 524
Filter zurücksetzenMicrosoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege
OpenMcdf has an Infinite loop DoS via crafted CFB directory cycle
MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade
OpenTelemetry .NET has potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path
Zio has SubFileSystem Path Confinement Bypass via Unresolved `..` Segment
Meridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out)
ChilliCream GraphQL Platform: Utf8GraphQLParser Stack Overflow via Deeply Nested GraphQL Documents
MsQuic has a Remote Elevation of Privilege Vulnerability
DotNetNuke.Core security code analysis rules triggered
ImageMagick has a memory leak in PNG encoder when writing a MNG image
Microsoft Security Advisory CVE-2026-26171 – .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-33116 – .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability
ImageMagick has a heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds
Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters
EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory
AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction
ImageMagick: META reader memory leak in the APP1JPEG input path
ImageMagick has possible memory leak in ASHLAR coder when action fails
ImageMagick has an Out-of-bounds Write via InterpretImageFilename
Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression Evaluation
Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString
Scriban has Uncontrolled Recursion in `object.to_json` Causing Unrecoverable Process Crash via StackOverflowException
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.