Hoch
CVE-2023-46084
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.587
Mittel
CVE-2023-3254
Widgets for Google Reviews <= 10.9 - Cross-Site Request Forgery to Plugin Settings Reset
Mittel
CVE-2023-46069
Ajax Archive Calendar <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Mittel
CVE-2023-46067
Rocket Font <= 1.2.3 - Cross-Site Request Forgery via update_option_check_match_default
Kritisch
CVE-2023-5601
WooCommerce Ninja Forms Product Add-ons <= 1.7.0 - Unauthenticated Arbitrary File Upload
Mittel
CVE-2023-32116
Custom post types <= 5.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Mittel
CVE-2023-4858
Simple Table Manager <= 1.5.6 - Authenticated(Administrator+) Stored Cross-Site Scripting
Mittel
CVE-2023-5613
Super Testimonials <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Mittel
CVE-2023-30492
Minimum Purchase for WooCommerce <= 2.0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2023-46072
Add Shortcodes Actions And Filters <= 2.0.9 - Reflected Cross-Site Scripting
Mittel
CVE-2023-46075
Contact Form Builder, Contact Widget <= 2.1.7 - Reflected Cross-Site Scripting
Hoch
CVE-2023-46081
Lava Directory Manager <= 1.1.34 - Unauthenticated Stored Cross-Site Scripting via New Listing
Mittel
CVE-2023-4810
Responsive Pricing Table < 5.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Mittel
CVE-2023-5614
Theme Switcha <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Mittel
CVE-2023-5228
User Registration – Custom Registration Form, Login Form And User Profile For WordPress <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2023-46085
Wp Ultimate Review <= 2.3.0 - Cross-Site Request Forgery via wur_settings_view
Mittel
CVE-2023-46079
Ashe Extra <= 1.2.91 - Missing Authorization via multiple AJAX actions
Mittel
CVE-2023-46087
Who Hit The Page – Hit Counter <= 1.4.14.3 - Cross-Site Request Forgery
Kritisch
CVE-2011-10004
Recip.ly <= 1.1.7 - Unauthenticated Arbitrary File Upload in uploadImage.php
Mittel
CVE-2023-46077
The Awesome Feed – Custom Feed <= 2.2.5 - Reflected Cross-Site Scripting
Hoch
CVE-2023-5590
NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.
Mittel
CVE-2018-25091
urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in t
Mittel
CVE-2023-5082
History Log by click5 <= 1.0.12 - Authenticated(Administrator+) Time-Based Blind SQL Injection
Mittel
CVE-2023-42792
Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write acce
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.