Hoch
CVE-2024-45855
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.593
Hoch
CVE-2024-45854
Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when a ‘describ
Hoch
CVE-2024-45851
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
Hoch
CVE-2024-45852
Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.
Hoch
CVE-2024-45853
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when used for a
Hoch
CVE-2024-45848
An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server. If a specially crafted ‘INSERT’
Hoch
CVE-2024-45849
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
Hoch
CVE-2024-45850
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
Hoch
CVE-2024-45846
An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT
Mittel
CVE-2024-8656
WPFactory Helper <= 1.7.0 - Reflected Cross-Site Scripting
Hoch
CVE-2022-2446
WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization
Mittel
CVE-2024-8734
Lucas String Replace <= 2.0.5 - Reflected Cross-Site Scripting
Mittel
CVE-2024-45460
Flipping Cards <= 1.30 - Authenticated (Administrator+) Stored Cross-Site Scripting
Mittel
CVE-2024-45455
WP Meta SEO <= 4.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Hoch
CVE-2024-7423
Stream <= 4.0.1 - Cross-Site Request Forgery to Arbitrary Options Update
Mittel
CVE-2024-45456
WP Meta SEO <= 4.5.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-45459
Product Slider for WooCommerce <= 1.13.50 - Reflected Cross-Site Scripting
Mittel
CVE-2024-5628
Avada | Website Builder For WordPress & eCommerce <= 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via fusion_button Shortcode
Mittel
CVE-2024-8731
Cron Jobs <= 1.2.9 - Reflected Cross-Site Scripting
Hoch
CVE-2024-8269
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration
Mittel
CVE-2024-45457
Spiffy Calendar <= 4.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-8714
WordPress Affiliates Plugin — SliceWP Affiliates <= 1.1.20 - Reflected Cross-Site Scripting
Mittel
CVE-2024-45458
Spiffy Calendar <= 4.9.13 - Reflected Cross-Site Scripting
Mittel
CVE-2024-43237
WordPress Tag Cloud Plugin – Tag Groups <= 2.0.3 - Missing Authorization to Information Exposure
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.