Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.647
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields
Progress Planner <= 1.8.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
WP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log
Sonaar <= 4.27.4 - Authenticated (Subscriber+) Privilege Escalation
Sonaar <= 4.27.4 - Reflected Cross-Site Scripting
MSN Partner Hub <= 2.8.7 - Missing Authorization
MapSVG <= 8.7.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Flatsome <= 3.20.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cornerstone <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Table Block by RioVizual <= 3.0.1 - Missing Authorization
MCPHub has an Improper Authorization vulnerability via its handleSseConnection function
MCPHub's ServerController is vulnerable to Command Injection
A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipula
A vulnerability was identified in Open Asset Import Library Assimp 6.0.2. Affected by this vulnerability is the function ODDLParser::getNextSeparator in the library assimp/contrib/openddlparser/includ
A vulnerability was determined in Open Asset Import Library Assimp 6.0.2. Affected is the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. This manipulation cau
Testimonial Slider <= 2.0.15 - Missing Authorization
Nelio Content <= 4.0.5 - Missing Authorization
SEO Meta Description Updater <= 1.2.0 - Missing Authorization
The7 < 12.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Conversios.io <= 7.2.13 - Missing Authorization
Liferay Portal exposes sensitive user data through its Freemarker template
IgnitionDeck <= 2.0.10 - Missing Authorization
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.