Średnia
CVE-2026-53825
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 547
Średnia
CVE-2026-8892
CM Business Directory <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Business Address Meta Fields
Średnia
CVE-2026-11397
WP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter
Wysoka
CVE-2026-35674
OpenClaw: Scoped chat.send route inheritance could bypass admin command scope gates
Wysoka
CVE-2026-53831
OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion
Wysoka
CVE-2026-35630
OpenClaw: QQBot native approval buttons did not enforce configured approver identity
Wysoka
CVE-2026-53814
OpenClaw: Hook-triggered CLI runs could receive owner MCP tool authority
Wysoka
CVE-2026-53817
OpenClaw: Control UI locality spoofing could mint a durable admin device token
Średnia
CVE-2026-12557
Ninja Forms - File Uploads <= 3.3.29 - Missing Authorization to Unauthenticated Log Disclosure and Deletion via debug-log/delete-all and debug-log/get-all REST Endpoints
Wysoka
CVE-2026-53832
OpenClaw: Same-host trusted-proxy deployments could accept local forged identity headers
Wysoka
CVE-2026-53810
OpenClaw's marketplace runtime extension metadata could point at unscanned payloads
Średnia
CVE-2026-53812
OpenClaw's browser act interactions could bypass private-network navigation checks
Wysoka
CVE-2026-53822
OpenClaw: Shell wrapper argv could change between approval and execution
Średnia
CVE-2026-8489
Ultimate Member <= 2.11.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Non-HTML Custom Textarea Profile Field
Średnia
CVE-2026-9626
JSON API User <= 4.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter
Krytyczna
CVE-2026-9725
Printcart Web to Print Product Designer for WooCommerce <= 2.5.2 - Unauthenticated Arbitrary File Deletion
Wysoka
CVE-2026-14352
AR for WooCommerce <= 8.40 - Unauthenticated Path Traversal to Arbitrary File Read via 'file' Parameter
Średnia
CVE-2026-53820
OpenClaw: Bundle MCP loopback could miss its exec denylist on session spawn
Wysoka
CVE-2026-53829
OpenClaw: Exec approval display truncation could hide the command being approved
Wysoka
CVE-2026-53815
OpenClaw: Message read actions could skip channel allowlist checks
Wysoka
CVE-2026-13040
NEX-Forms <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting via 'real_val__' Parameter
Średnia
CVE-2017-12155
Openstack tripleo-heat-templates unauthenticated file access
Średnia
CVE-2017-16239
OpenStack Nova Filter Scheduler Bypass
Wysoka
CVE-2017-17051
OpenStack Nova DoS by rebuilding the same instance with a new image multiple times
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.