Hoch
CVE-2021-43116
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.632
Mittel
CVE-2022-2328
Flexi Quote Rotator <= 0.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Kritisch
e9c81117-a9da-41bb-afc6-94196167af04
Social Share Buttons by Supsystic <= 2.2.6 - SQL Injection
Mittel
CVE-2022-2413
Slide Anything – Responsive Content / HTML Slider and Carousel <= 2.3.46 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
98c9c9cb-ca35-461e-9ca6-733012332fd6
MakeStories (for Web Stories) <= 2.6.4 - Cross-Ste Scripting
Mittel
7e697e7f-8d5b-4a9f-9148-f2dc5fb1ba38
Web and WooCommerce Addons for WPBakery Builder <= 1.4.4.1 - Missing Authorization Checks
Mittel
7cfeed0f-ab3e-4b35-9b69-08cc7e7ffb45
Flexi Quote Rotator <= 0.9.4 - Authenticated Stored Cross-Site Scripting
Kritisch
CVE-2022-33965
WP Visitor Statistics (Real Time Traffic) <= 5.7 - Unauthenticated SQL Injection
Hoch
CVE-2022-2273
Simple Membership <= 4.1.2 - Membership Privilege Escalation
Mittel
6ac3b00e-26f2-471d-a682-6cb4939e819e
WP PayPal <= 1.2.3.8 - Cross-Site Scripting
Mittel
611b88f4-96ae-47e4-8642-e09bee333468
Royal Custom CSS for Page and Post <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2022-34658
Download Manager <= 3.2.48 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kritisch
CVE-2022-2317
Simple Membership <= 4.1.2 - Membership Privilege Escalation
Hoch
CVE-2022-31147
jquery-validation Regular Expression Denial of Service due to arbitrary input to url2 method
Mittel
ghsa-c58j-88f5-h53f
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in pycares
Mittel
CVE-2022-31108
Possible inject arbitrary `CSS` into the generated graph affecting the container HTML
Hoch
CVE-2022-30290
In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint. An attacker can abuse the identified vulnerability in order to arbitrarily change their reg
Mittel
CVE-2022-30289
A stored Cross-site Scripting (XSS) vulnerability was identified in the Data Import functionality of OpenCTI through 5.2.4. An attacker can abuse the vulnerability to upload a malicious file that will
Mittel
CVE-2022-2309
lxml NULL Pointer Dereference allows attackers to cause a denial of service
Kritisch
CVE-2022-33171
SQL injection in typeORM
Mittel
CVE-2022-2300
Cross-site Scripting in microweber
Mittel
CVE-2022-2181
Advanced WordPress Reset <= 1.5 - Reflected Cross-Site Scripting
Hoch
CVE-2022-2444
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
Mittel
d7bee25e-7574-4d3d-ad58-9b30d99de525
LearnPress – WordPress LMS Plugin <= 4.1.6.7 - Reflected Cross-Site Scripting
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.