Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.405
Table & Contact Form 7 Database – Tablesome <= 1.0.27 - Reflected Cross-Site Scripting
WooThumbs for WooCommerce by Iconic <= 5.5.3 - Reflected Cross-Site Scripting
FV Flowplayer Video Player <= 7.5.41.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting
Inline Related Posts <= 3.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Coupon Affiliates <= 5.12.7 - Reflected Cross-Site Scripting
Scrollsequence <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Regular expression denial-of-service in Django
TurboBoost Commands vulnerable to arbitrary method invocation
CoreWCF NetFraming based services can leave connections open when they should be closed
fgr Vulnerable to Insecure Default Variable Initialization
RaspAP Vulnerable to Code Injection via an Unknown Process in File `includes/provider.php`
SSRF vulnerability using the Aegis DataBinding in Apache CXF
Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling
Gutenberg Blocks by Kadence Blocks <= 3.2.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Evergreen Content Poster <= 1.4.1 - Reflected Cross-Site Scripting
Visual Composer Website Builder <= 45.6.0 - Authenticated (Editor+) Stored Cross-Site Scripting
WP Calameo <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
ElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scripting
GiveWP <= 3.3.1 - Reflected Cross-Site Scripting
ARMember <= 4.0.23 - Authenticated (Administrator+) Stored Cross-Site Scripting
The Moneytizer <= 9.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Calendarista Basic Edition <= 3.0.2 - Unauthenticated Cross-Site Scripting
Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.