Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.602
Slick Sitemap <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App <=7.0.3.0 - Reflected Cross-Site Scripting
Moodle allows users to retrieve information they did not have permission to access
Moodle Lesson activity password bypass through PHP loose comparison
Moodle IDOR when accessing list of course badges
Moodle IDOR when deleting OAuth2 linked accounts
affiliate-toolkit <= 3.6.7 - Reflected Cross-Site Scripting
Shopready <= 3.5 - Authenticated (Contributor+) Local File Inclusion
Branda – White Label & Branding, Custom Login Page Customizer <= 3.4.19 - Reflected Cross-Site Scripting
Dynamic "To Top" 3.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Contact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion
BSK Forms Validation <= 1.7 - Reflected Cross-Site Scripting
Pricing table addon for elementor <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
Add Chat App Button <= 2.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor
Pure CSS Circle Progress bar <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Tutor LMS <= 2.7.6 - User Registration Setting Bypass to Unauthorized User Registration
Tutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filter
SP Blog Designer <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
ForumEngine <= 1.8 - Reflected Cross-Site Scripting
Block Editor Bootstrap Blocks <= 6.6.1 - Reflected Cross-Site Scripting via tab
Absolute Addons For Elementor <= 1.0.14 - Authenticated (Contributor+) Local File Inclusion
Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post Disclosure
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.