Hoch
CVE-2020-29553
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.647
Kritisch
CVE-2021-25915
Changeset vulnerable to prototype pollution
Mittel
CVE-2020-27838
Keycloak discloses information without authentication
Kritisch
CVE-2020-24914
qcubed PHP object injection
Kritisch
CVE-2020-24913
qcubed SQL injection vulnerability in profile.php via the strQuery parameter
Mittel
CVE-2020-24912
qcubed reflected cross-site scripting (XSS) vulnerability
Hoch
CVE-2021-25315
CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify
Hoch
CVE-2020-35296
ThinkAdmin Admin Panel Access using Default Credentials
Kritisch
CVE-2021-3197
An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API re
Kritisch
CVE-2021-3144
In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. (They might be used to run command against the salt master or minions.)
Kritisch
CVE-2021-3148
An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single
Hoch
CVE-2021-25282
An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal.
Kritisch
CVE-2021-25283
An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect against server side template injection attacks.
Kritisch
CVE-2021-25281
An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the maste
Mittel
CVE-2021-25284
An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level.
Hoch
CVE-2020-28972
In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate.
Hoch
CVE-2020-28243
An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any us
Hoch
CVE-2020-35662
In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated.
Kritisch
CVE-2021-26700
Remote code execution in vscode-npm-script
Kritisch
CVE-2021-24112
.NET Core Remote Code Execution Vulnerability
Mittel
CVE-2021-1721
Denial of service in .NET core
Mittel
CVE-2021-21616
Stored XSS vulnerability in Jenkins Active Choices Plugin
Niedrig
CVE-2021-21621
Support bundles can include user session IDs in Jenkins Support Core Plugin
Mittel
CVE-2021-21622
Stored XSS vulnerability in Jenkins Artifact Repository Parameter Plugin
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.