Hoch
CVE-2025-49055
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.609
Hoch
CVE-2025-54003
Depot <= 1.16 - Unauthenticated Local File Inclusion
Mittel
CVE-2025-22726
nK Themes Helper <= 1.7.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Mittel
CVE-2026-27090
Kenta Companion <= 1.3.3 - Cross-Site Request Forgery
Mittel
CVE-2025-22715
Attractive Donations System - Easy Stripe & Paypal donations <= 1.25 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Mittel
CVE-2026-22186
Bio-Formats has an XML External Entity (XXE) vulnerability
Mittel
CVE-2026-22187
Bio-Formats performs unsafe Java deserialization of attacker-controlled memoization cache files (.bfmemo) during image processing
Mittel
CVE-2025-14984
Gutenverse Form <= 2.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Hoch
CVE-2026-22244
OpenMetadata's Server-Side Template Injection (SSTI) in FreeMarker email templates leads to RCE
Mittel
CVE-2026-22242
CoreShop Vulnerable to SQL Injection via Admin Reports
Hoch
CVE-2026-22028
Preact has JSON VNode Injection issue
Mittel
CVE-2026-21894
n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks
Kritisch
CVE-2026-21858
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
Hoch
CVE-2025-69264
pnpm v10+ Bypass "Dependency lifecycle scripts execution disabled by default"
Hoch
CVE-2025-69263
pnpm Has Lockfile Integrity Bypass that Allows Remote Dynamic Dependencies
Hoch
CVE-2025-69262
pnpm vulnerable to Command Injection via environment variable substitution
Mittel
CVE-2025-13679
Tutor LMS <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via tutor_order_details
Kritisch
CVE-2025-61492
terminal-controller-mcp vulnerable to Command Injection
Hoch
CVE-2025-67364
fast-filesystem-mcp has a Path Traversal vulnerability
Kritisch
CVE-2025-12543
Undertow HTTP server core doesn't properly validate the Host header in incoming HTTP requests
Mittel
CVE-2025-61782
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.3, an open redirect vulnerability exists in the OpenCTI platform's SAML authen
Mittel
CVE-2025-66560
Quarkus REST has potential worker thread starvation when HTTP connection is closed while waiting to write
Mittel
CVE-2025-12640
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.1.5 - Missing Authorization to Authenticated (Author+) Media Replacement
Mittel
CVE-2025-14275
Jeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.