Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.602
Cross-Site Request Forgery (CSRF) in wallabag/wallabag
Cross-site Scripting (XSS) in wallabag/wallabag
Replyable – Subscribe to Comments and Reply by Email <= 2.2.9 - Authenticated (Subscriber+) PHP Object Injection via prompt_dismiss_notice
ColorWay <= 4.2.3 - Cross Site Request Forgery
Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletion
微信机器人高级版 <= 6.2.1 - Reflected Cross Site Scripting
Plugin for Google Reviews <= 2.2.3 - Authenticated (Subscriber+) SQL Injection
Mayan EDMS DMS XSS vulnerability
Apache Kafka Connect vulnerable to Deserialization of Untrusted Data
Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf
URI validation failure on SVG parsing. Bypass of CVE-2023-23924
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_object
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_order
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_order
Interactive Geo Maps <= 1.5.9 - Authenticated (Editor+) Stored Cross-Site Scripting
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_order
Responsive Pricing Table <= 5.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Yellow Yard Searchbar <= 2.7.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder
Slider by Supsystic <= 1.8.6 - Cross-Site Request Forgery
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_delete_folder
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.