Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.587
JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection
Polls CP <= 1.0.8 - Cross-Site Request Forgery
GetGenie – AI Content Writer with Keyword Research & SEO Tracking <= 4.4.1 - Unauthenticated Information Exposure
GEO my WP <= 4.5.5 - Unauthenticated SQL Injection
Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Unauthenticated Stored Cross-Site Scripting via 'bookly-customer-full-name' Cookie
ConnectBot SSH Client Library: Excessive allocation and integer overflow in DER private-key parsing
ConnectBot SSH Client Library: Unbounded SSH field lengths can cause excessive memory allocation
Fabric.js improper escaping in fabric.Gradient colorStops leads to XSS in SVG serialization
esbuild allows arbitrary file read when running the development server on Windows
TYPO3 CMS has Broken Access Control in its Form Framework
TYPO3 CMS has Broken Access Control in the Recycler Module
TYPO3 CMS has an Open Redirect Vulnerability via Core Utilities
TYPO3 CMS: Destructive Actions on File Mount Folders
TYPO3 HTML Sanitizer allows Cross-site Scripting
Meow Gallery <= 5.4.4 - Missing Authorization to Authenticated (Author+) Shortcode creation
TYPO3 CMS has Privilege Escalation & SQL Injection in its Form Framework
TYPO3 CMS has Broken Access Control in its DataHandler
TYPO3 CMS has Broken Access Control in its Form Framework
Pagelayer <= 2.0.9 - Incorrect Authorization to Authenticated (Contributor+) Mail Relay Configuration via 'contacts'
TYPO3 CMS has Broken Access Control in its Media Module
TYPO3 CMS has Insecure Deserialization via Core API
TYPO3 CMS has Broken Access Control in its File Abstraction Layer
TYPO3 CMS has Broken Access Control in Backend API
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.