Mittel
CVE-2024-10579
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.602
Mittel
CVE-2024-11032
Parsi Date <= 5.1.1 - Reflected Cross-Site Scripting via add_query_arg Parameter
Mittel
CVE-2024-9170
Booster for WooCommerce <= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode
Mittel
CVE-2024-11091
Support SVG – Upload svg files in wordpress without hassle <= 1.1.0 - Authenticated (Author+) Stored Cross-site Scripting via SVG File Upload
Mittel
CVE-2024-11119
BNE Gallery Extended <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via gallery Shortcode
Hoch
CVE-2024-10039
Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination
Mittel
CVE-2024-11192
Spotify Play Button for WordPress <= 2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via spotifyplaybutton Shortcode
Mittel
CVE-2024-9666
Keycloak proxy header handling Denial-of-Service (DoS) vulnerability
Mittel
CVE-2024-11202
Multiple Plugins <= (Various Versions) - Reflected Cross-Site Scripting via cminds_free_guide Shortcode
Nicht bewertet
pysec-2024-152
aiocpa 0.1.13 contains credential harvesting code
Hoch
CVE-2024-10451
Keycloak Build Process Exposes Sensitive Data
Mittel
CVE-2024-10492
Keycloak Path Traversal Vulnerability Due to External Control of File Name or Path
Hoch
CVE-2024-27134
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU at
Hoch
CVE-2024-10270
org.keycloak:keycloak-services has Inefficient Regular Expression Complexity
Mittel
CVE-2024-11002
InPost Gallery <= 2.1.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via inpost_gallery_get_shortcode_template
Mittel
CVE-2024-10857
Product Input Fields for WooCommerce <= 1.9 - Authenticated (Contributor+) Arbitrary File Read
Hoch
CVE-2024-10570
Security & Malware scan by CleanTalk <= 2.145 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated SQL Injection
Kritisch
CVE-2024-10542
Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin Installation
Niedrig
CVE-2024-53261
@sveltejs/kit vulnerable to XSS on dev mode 404 page
Niedrig
CVE-2024-53262
@sveltejs/kit has unescaped error message included on error page
Mittel
CVE-2024-11418
Additional Order Filters for WooCommerce <= 1.21 - Reflected Cross-Site Scripting
Mittel
CVE-2024-8236
Elementor Website Builder – More than Just a Page Builder <= 3.25.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-10308
Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget
Mittel
CVE-2024-11342
Skt NURCaptcha <= 3.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.