Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.515
Paid Memberships Pro <= 2.12.8 - Authenticated (Contributor+) User Meta Disclosure
All 404 Pages Redirect to Homepage <= 1.9 - Unauthenticated Stored Cross-Site Scripting
Honeypot for WP Comment <= 2.2.3 - Directory Traversal to Unauthenticated Arbitrary File Deletion
Event Tickets and Registration <= 5.8.0 Events Tickets Plus <= 5.9.0 - Authenticated (Contributor+) Information Exposure
Internal Link Juicer <= 2.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting
InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure
Events Tickets Plus <= 5.9.0 - Missing Authorization to Information Exposure
Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting
Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Service
Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export
All In One WP Security <= 5.2.6 - Cross-Site Request Forgery to IP Blocking
Passster – Password Protect Pages and Content <= 4.2.6.2 - Missing Authorization to Sensitive Information Exposure
Improper neutralization of SQL parameter in Opart Easy Redirect for PrestaShop
Improper neutralization of SQL parameter in InnovaDeluxe - Manufacturer or supplier alphabetical search module for PrestaShop
Improper neutralization of SQL parameter in Presta Monster - Multi Accessories Pro module for PrestaShop
Improper neutralization of SQL parameter in Boostmyshop module for PrestaShop
Pimcore Admin Classic Bundle permissions are not getting checked when working with tags
Graylog session fixation vulnerability through cookie injection
Graylog vulnerable to instantiation of arbitrary classes triggered by API request
drupal/migrate_tools - SA-CONTRIB-2024-008
CKEditor cross-site scripting vulnerability in AJAX sample
CKEditor4 Cross-site Scripting vulnerability in samples with enabled the preview feature
CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.