Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.602
Posti Shipping <= 3.10.2 - Full Path Disclosure
SPEmailHandler-PHP has Potential Abuse for Sending Arbitrary Emails
Tumult Hype Animations <= 1.9.15 - Authenticated (Author+) Arbitrary File Upload via hypeanimations_panel Function
HLS Player <= 1.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP JobSearch <= 2.6.7 - Authentication Bypass to Account Takeover and Privilege Escalation
Devolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplications
Querydsl vulnerable to HQL injection through orderBy
Jenkins Filesystem List Parameter Plugin has Path Traversal vulnerability
Jenkins Simple Queue Plugin has stored cross-site scripting (XSS) vulnerability
drupal/tarte_au_citron - SA-CONTRIB-2024-064
Wallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types
Cryptocurrency Widgets For Elementor <= 1.6.4 - Unauthenticated Local File Inclusion
Kudos Donations – Easy donations and payments with Mollie <= 3.2.9 - Reflected Cross-Site Scripting
Login with Vipps and MobilePay <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
FAQ Builder AYS <= 1.7.1 - Reflected Cross-Site Scripting
Kudos Donations – Easy donations and payments with Mollie <= 3.2.9 - Reflected Cross-Site Scripting via 'add_query_arg'
Awesome Event Booking <= 2.7.1 - Reflected Cross-Site Scripting
Restaurant & Cafe Addon for Elementor <= 1.5.9 - Authenticated (Contributor+) Post Disclosure
SEO Landing Page Generator <= 1.66.2 - Reflected Cross-Site Scripting
Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution
File Manager Pro – Filester <= 1.8.5 - Authenticated (Administrator+) Local JavaScript File Inclusion
Cleanup – Directory Listing & Classifieds WordPress Plugin <= 1.0.4 - Reflected Cross-Site Scripting
Primary Addon for Elementor <= 1.6.2 - Authenticated (Contributor+) Post Disclosure
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.