Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.445
Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`
Open Babel has out-of-bounds write in Gaussian coords_type orientation parser
Open Babel has out-of-bounds write in CSR PadString (title field)
Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence
Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule
Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)
Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines
mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call
Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow
Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString
Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt
Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge
Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies
Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles
python-socketio: Binary attachment accumulation can cause denial of service
python-engineio has possible denial of service due to maximum payload size sometimes not being enforced
python-engineio has unbound thread allocation that can cause denial of service
Lemur Privilege Escalation: Non-admin role members can rewrite role membership via PUT /api/1/roles/<id>
Lemur: JWT verifier honors attacker-supplied alg, enabling ATO
Lemur has an authorization bypass in StrictRolePermission / AuthorityCreatorPermission
Lemur: Crafted CRL/OCSP URLs in uploaded certificates lead to post-authentication SSRF
Lemur user-update path stores plaintext passwords
joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.