Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 7.071
Filter zurücksetzenOctober CMS Allows Unprotected SVG Rename in Media Manager
Grokability Snipe-IT has incorrect authorization for accessing asset information
SQL injection in ADOdb PostgreSQL driver pg_insert_id() method
ShowDoc unrestricted file upload vulnerability
YesWiki Stored XSS Vulnerability in Comments
YesWiki Remote Code Execution via Arbitrary PHP File Write and Execution
YesWiki Vulnerable to Unauthenticated Site Backup Creation and Download
YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Yeswiki Vulnerable to Authenticated Reflected Cross-site Scripting
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting
Moodle allows IDOR when accessing the cohorts report
Moodle's mod_data edit/delete pages pass CSRF token in GET parameter
Moodle has an IDOR in messaging web service which allows access to some user details
Moodle has an IDOR in web service which allows users enrolled in a course to access some details of other users
Moodle has an authenticated remote code execution risk in the Moodle LMS EQUELLA repository
Moodle's AJAX section delete does not respect course_can_delete_section()
Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository
Moodle has reflected Cross-site Scripting risk in policy tool
Moodle allows IDOR in RSS block, which allows access to additional RSS feeds
Moodle has a CSRF risk in user tours manager that allows tour duplication
Moodle has a CSRF risk in Brickfield tool's analysis request action
Moodle reveals student identities through assignment submissions search on anonymous submissions
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.