Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.647
The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to cond
Nirweb support <= 2.7.9 - SQL Injection
Tabs Responsive <= 2.2.7 - Editor+ Stored Cross-Site Scripting
StaffList <= 3.1.2 - Authenticated SQL Injection
WP Meta SEO <= 4.4.6 - Admin+ Stored Cross-Site Scripting via breadcrumbs
WP Contacts Manager <= 2.2.4 - Unauthenticated SQL Injection
Check & Log email <= 1.0.5 - Reflected Cross-Site Scripting
XML Sitemap Generator for Google <= 2.0.3 - Reflected Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vect
Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs
Joomla! Open Redirect vulnerability
Joomla! allows attackers to access cached pages
Drupal vulnerable to Cross-site Scripting
phpMyAdmin extension for TYPO3 has Cross-site Scripting vulnerability
Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possi
Apache Tomcat Directory Traversal vulnerability
TYPO3 Unrestricted File Upload vulnerability
Apache Tomcat Path Traversal Vulnerability
Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject
Apache Struts Cross-site Scripting vulnerability
Apache Tomcat Cross-site scripting (XSS) vulnerability
The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges.
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.