Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.616
MailUp Auto Subscription <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Dolibarr Cross-site Scripting vulnerability
Dolibarr Cross-site Scripting vulnerability
vllm: Malicious model to RCE by torch.load in hf_model_weights_iterator
Apache Cocoon vulnerable to Incorrect Usage of Seeds in Pseudo-Random Number Generator
uniapi version 1.0.7 contained an information harvesting script.
Opening a malicious website while running a Nuxt dev server could allow read-only access to code
Opening a malicious website while running a Nuxt dev server could allow read-only access to code
Apache Solr Relative Path Traversal vulnerability
Apache Solr vulnerable to Execution with Unnecessary Privileges
WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.6 - Reflected Cross-Site Scripting
Designer <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Morkva UA Shipping <= 1.0.18 - Unauthenticated Local File Inclusion
Oshine Modules <= 3.3.7 - Reflected Cross-Site Scripting
Tube Video Ads Lite <= 1.5.7 - Reflected Cross-Site Scripting
Import and export users and customers <= 1.27.12 - Unauthenticated Sensitive Information Disclosure
Scroll Styler <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Touch Slider <= 2.2 - Reflected Cross-Site Scripting
Philantro – Donations and Donor Management <= 5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via donate Shortcode
Media Downloader <= 0.4.7.5 - Reflected Cross-Site Scripting
Full Circle <= 0.5.7.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Eventer <= 3.9.8 - Unauthenticated SQL Injection via eventer_get_attendees
FlashCounter <= 1.1.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.