Mittel
CVE-2024-52980
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.737
Mittel
ghsa-68wv-g3fw-pq7q
Shopware Broken ACL on Document retrieval to access other customers documents
Hoch
CVE-2025-27892
Shopware Vulnerable to Blind SQL-injection in DAL aggregations
Mittel
CVE-2025-3100
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
Niedrig
CVE-2025-30166
Pimcore's Admin Classic Bundle allows HTML Injection
Hoch
CVE-2025-30151
Shopware allows Denial Of Service via password length
Mittel
CVE-2025-30150
Shopware 6 allows attackers to check for registered accounts through the store-api
Hoch
CVE-2025-31599
Bulk Product Sync <= 8.6 - Unauthenticated SQL Injection
Hoch
CVE-2025-32145
WpEvently <= 4.3.6 - Authenticated (Contributor+) PHP Object Injection
Hoch
CVE-2025-32140
WP Remote Thumbnail <= 1.3.2 - Authenticated (Contributor+) Arbitrary File Upload
Mittel
CVE-2024-12273
Calculated Fields Form <= 5.2.61 - Authenticated (Admin+) Stored Cross-Site Scripting
Hoch
CVE-2025-32206
Processing Projects <= 1.0.2 - Authenticated (Shop Manager+) Arbitrary File Upload
Mittel
CVE-2025-32214
Hive Support <= 1.2.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Mittel
CVE-2025-32240
Site Notify <= 1.0 - Missing Authorization
Hoch
CVE-2025-31524
WP User Profiles <= 2.6.2 - Authenticated (Subscriber+) Privilege Escalation
Hoch
CVE-2025-32202
Insert or Embed Articulate Content into WordPress <= 4.3000000025 - Authenticated (Editor+) Arbitrary File Upload
Mittel
CVE-2025-2883
Accept SagePay Payments Using Contact Form 7 <= 2.0 - Unauthenticated Information Exposure
Mittel
CVE-2025-32029
ts-asn1-der has Incorrect DER Encoding of Numbers Leading to Denial of Service and Incorrect Value Representation
Hoch
CVE-2025-2807
Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
Mittel
CVE-2025-29480
Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid
Hoch
CVE-2025-3064
WPFront User Role Editor <= 4.2.1 - Cross-Site Request Forgery to Privilege Escalation via whitelist_options Function
Mittel
CVE-2025-2882
GreenPay(tm) by Green.Money 3.0.0 - 3.0.9 - Unauthenticated Information Exposure
Mittel
CVE-2025-32014
estree-util-value-to-estree allows prototype pollution in generated ESTree
Hoch
CVE-2025-32031
Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.