Średnia
CVE-2026-86200
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 30
Wyczyść filtry
Niska
CVE-2026-86203
PocketMine-MP: Player entities can still die and drop items in flaggedForDespawn state
Średnia
CVE-2026-86202
PocketMine-MP: Network amplification vulnerability with `ActorEventPacket`
Wysoka
CVE-2026-86204
PocketMine-MP: JSON decoding of unlimited size large arrays/objects in ModalFormResponse Handling
Wysoka
CVE-2026-86201
PocketMine-MP: LogDoS by large complex unknown property logging in clientData in LoginPacket
Wysoka
CVE-2025-71417
PocketMine-MP `ResourcePackDataInfoPacket` amplification vulnerability due to lack of resource pack sequence status checking
Średnia
CVE-2025-71418
PocketMine-MP allows malicious client data to waste server resources due to lack of limits for explode()
Wysoka
CVE-2024-58381
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (3rd time)
Wysoka
CVE-2024-58380
PocketMine-MP BookEditPacket crash when inventory slot in the packet is invalid
Wysoka
CVE-2023-54390
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again)
Wysoka
CVE-2023-54355
PocketMine-MP server crash due to incorrect EC curve used for LoginPacket identityPublicKey
Wysoka
CVE-2023-54392
PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket
Wysoka
CVE-2023-7332
PocketMine-MP vulnerable to improperly checked dropped item count leading to server crash
Wysoka
CVE-2023-54393
PocketMine-MP vulnerable to server crash with certain invalid JSON payloads in `LoginPacket` due to vulnerable dependency
Średnia
CVE-2023-54394
PocketMine MP vulnerable to uncontrolled resource consumption via mismatched type of 'InventoryTransactionPacket'
Średnia
CVE-2023-54395
PocketMine-MP vulnerable to denial-of-service by sending large modal form responses
Wysoka
CVE-2023-54396
PocketMine-MP has improperly handled dye colour IDs in banner NBT, leading to server crash
Wysoka
CVE-2022-51009
PocketMine-MP invalid skin geometry JSON data leading to server crash
Wysoka
CVE-2022-51010
Improperly checked IDs on itemstacks received from the client leading to server crash in PocketMine-MP
Średnia
CVE-2022-51011
Denial-of-service vulnerability processing large chat messages containing many newlines
Wysoka
CVE-2022-51012
Insufficient type validation in pocketmine/pocketmine-mp
Wysoka
CVE-2022-51013
Improperly checked metadata on tools/armour itemstacks received from the client
Wysoka
CVE-2021-48007
NaN/INF in serverbound movement packets can crash clients and servers
Średnia
CVE-2022-51016
Impersonation of other users (passing XBOX Live authentication) by theft of logins in PocketMine-MP
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.