Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 7.070
Filter zurücksetzenPHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling
LibreNMS contains an authenticated SQL Injection vulnerability
phpMyFAQ: Public API endpoints expose emails and invisible questions
phpMyFAQ: /api/setup/backup accessible to any authenticated user (authz missing)
phpMyFAQ: Attachment download allowed without dlattachment right (broken access control)
LavaLite CMS affected by a stored cross-site scripting vulnerability
Moodle affected by a code injection vulnerability
Freeform Craft Plugin CP UI (builder/integrations) has Stored Cross-Site Scripting (XSS) issue
phpPgAdmin contains a remote command execution vulnerability
CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier
mailqueue TYPO3 extension affected by Insecure Deserialization in QueueableFileTransport
Laravel Redis Horizontal Scaling Insecure Deserialization
Kimai has an Authenticated Server-Side Template Injection (SSTI)
Pterodactyl improperly locks resources allowing raced queries to create more resources than alloted
MineAdmin improperly refreshes tokens
MineAdmin May Expose Sensitive Information to an Unauthorized Actor
MineAdmin May Expose Sensitive Information to an Unauthorized Actor
MineAdmin has Incorrect Privilege Assignment
CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting
Livewire Filemanager does not restrict uploaded file types
solspace/craft-freeform Exposed to Known Axios Vulnerabilities via Precompiled Assets
solspace/craft-freeform Vulnerable to XSS in `PhpSpreadsheet` HTML Writer Due to Unsanitized Styling Data
solspace/craft-freeform Has a DoS Vulnerability
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.