Mittel
CVE-2026-31922
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.602
Mittel
CVE-2026-25333
Shopwell <= 1.0.11 - Missing Authorization
Mittel
CVE-2026-24962
Sigmize <= 0.0.9 - Cross-Site Request Forgery
Mittel
CVE-2026-25332
Endless Posts Navigation <= 2.2.9 - Missing Authorization
Mittel
CVE-2026-39609
Wava Payment <= 0.3.7 - Missing Authorization
Kritisch
CVE-2026-1709
A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows un
Mittel
CVE-2026-25516
NiceGUI's XSS vulnerability in ui.markdown() allows arbitrary JavaScript execution through unsanitized HTML content
Hoch
CVE-2026-25732
NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write
Mittel
CVE-2025-15476
The Bucketlister <= 0.1.5 - Missing Authorization to Authenticated (Subscriber+) Bucket List Modification
Mittel
CVE-2025-15477
The Bucketlister <= 0.1.5 - Authenticated (Contributor+) SQL Injection via `category` and `id` Shortcode Attributes
Mittel
CVE-2026-0555
Premmerce <= 1.3.20 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'premmerce_wizard_actions' AJAX Endpoint
Mittel
CVE-2026-1608
Video Onclick <= 0.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Mittel
CVE-2026-1570
Simple Bible Verse via Shortcode <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Mittel
CVE-2026-1611
Wikiloops Track Player <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Mittel
CVE-2026-1634
Subitem AL Slider <= 1.0.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Mittel
CVE-2026-1082
TITLE ANIMATOR <= 1.0 - Cross-Site Request Forgery to Settings Update
Mittel
CVE-2026-1675
Advanced Country Blocker <= 2.3.1 - Unauthenticated Authorization Bypass via Insecure Default Secret Key
Mittel
CVE-2026-1573
OMIGO <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Mittel
CVE-2026-1643
MP-Ukagaka <= 1.5.2 - Reflected Cross-Site Scripting
Mittel
CVE-2026-1613
Wonka Slide <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Hoch
CVE-2026-25762
AdonisJS vulnerable to Denial of Service (DoS) via Unrestricted Memory Buffering in PartHandler during File Type Detection
Kritisch
ghsa-4f84-67cv-qrv3
A single post-release of dydx-v4-client contained obfuscated multi-stage loader
Hoch
CVE-2026-25754
AdonisJS multipart body parsing has Prototype Pollution issue
Hoch
CVE-2026-25725
Claude Code has Sandbox Escape via Persistent Configuration Injection in settings.json
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.