Mittel
CVE-2024-34439
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.563
Mittel
CVE-2024-34432
Better Elementor Addons <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-4312
Soccer Engine – Soccer Plugin for WordPress <= 1.12 - Cross-Site Request Forgery
Mittel
CVE-2024-4135
WP Latest Posts <= 5.0.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Mittel
CVE-2024-3494
Mesmerize Companion <= 1.6.148 - Authenticated (Contributor+) Stored Cross-Site Scripting via mesmerize_contact_form Shortcode
Mittel
CVE-2024-34546
Sticky Social Link <= 2.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2024-3952
Advanced Ads – Ad Manager & AdSense <= 1.52.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Ad Widget
Mittel
CVE-2024-34559
Ghost <= 1.4.0 - Unauthenticated Sensitive Information Exposure
Kritisch
CVE-2024-4606
Ultimate Store Kit Elementor Addons <= 2.0.3 - Unauthenticated PHP Object Injection
Mittel
CVE-2024-4281
Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode
Kritisch
CVE-2024-4393
Social Connect <= 1.2 - Authentication Bypass
Mittel
CVE-2024-34562
Move Addons for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-34445
SKT Addons for Elementor <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Page Title
Mittel
CVE-2024-1693
SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update
Mittel
CVE-2024-34553
Stockholm Core <= 2.4.1 - Reflected Cross-Site Scripting
Mittel
CVE-2024-34556
Barcode Scanner with Inventory & Order Manager <= 1.5.4 - Unauthenticated Information Exposure
Mittel
CVE-2024-34547
Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) <= 1.1.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hoch
CVE-2024-3954
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.38 - Authenticated (Contributor+) PHP Object Injection
Mittel
CVE-2024-3068
Custom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2024-3989
HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justify
Mittel
CVE-2024-34435
Aiomatic <= 1.9.3 - Missing Authorization
Hoch
CVE-2024-34246
wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault via the function "main" in wasm3/platforms/app/main.c.
Kritisch
CVE-2024-34249
wasm3 v0.5.0 was discovered to contain a heap buffer overflow which leads to segmentation fault via the function "DeallocateSlot" in wasm3/source/m3_compile.c.
Hoch
CVE-2024-34252
wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupied" in wasm3/source/m3_compile.c.
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.