Hoch
CVE-2009-3695
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 682
Filter zurücksetzen
Mittel
CVE-2008-3328
Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Mittel
CVE-2008-2951
Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possi
Mittel
CVE-2007-1405
Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web
Mittel
CVE-2007-1406
Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.
Hoch
CVE-2006-5878
Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.
Hoch
CVE-2006-3695
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers t
Mittel
CVE-2005-4644
Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG t
Hoch
CVE-2022-24845
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In affected versions, the return of `<iface>.returns_int128()` is not validated to fall within the bounds of `int128`. Thi
Hoch
CVE-2022-24761
HTTP Request Smuggling in waitress
Kritisch
ghsa-32gv-6cf3-wcmq
HTTP/2 DoS Attacks: Ping, Reset, and Settings Floods
Mittel
CVE-2022-24737
Exposure of Sensitive Information to an Unauthorized Actor in httpie
Hoch
CVE-2022-21716
Twisted SSH client and server deny of service during SSH handshake.
Mittel
CVE-2021-3620
Ansible discloses sensitive information in traceback error message
Mittel
CVE-2022-23590
Crash due to erroneous `StatusOr` in TensorFlow
Mittel
CVE-2021-43818
lxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through
Mittel
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
Hoch
CVE-2021-41127
Maliciously Crafted Model Archive Can Lead To Arbitrary File Write
Hoch
CVE-2021-32839
StripComments filter contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service)
Hoch
CVE-2021-32806
URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal
Hoch
CVE-2021-33503
Catastrophic backtracking in URL authority parser when passed URL containing many @ characters
Mittel
CVE-2021-32681
Cross-site Scripting in wagtail
Hoch
CVE-2021-32677
Cross-Site Request Forgery (CSRF) in FastAPI
Mittel
CVE-2021-32670
Reflected cross-site scripting issue in Datasette
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.