Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.436
Langroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read
Kiwi TCMS's /init-db/ page renders and responds to requests after first use
Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload
Open Babel has out-of-bounds write in ORCA nAtoms parser
Open Babel has out-of-bounds write in MOL2 attribute/value parser
Open Babel has uninitialized pointer dereference in GRO residue parser
Open Babel has uninitialized pointer dereference in MSI atom parser
Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)
Open Babel has out-of-bounds write in Gaussian translationVectors[]
mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete
Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT)
Open Babel has uninitialized pointer dereference in PQS pFormat
Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant)
Open Babel has out-of-bounds write in MSI translationVectors[]
Open Babel has out-of-bounds write in PQS coord_file parser
Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`
Open Babel has out-of-bounds write in Gaussian coords_type orientation parser
Open Babel has out-of-bounds write in CSR PadString (title field)
Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence
Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule
Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)
Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines
mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.