Hoch
CVE-2026-48109
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.587
Hoch
CVE-2025-27511
GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection
Mittel
CVE-2026-48067
Filament has inconsistent scope enforcement for its AttachAction and AssociateAction Select fields
Hoch
CVE-2026-48059
Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion
Mittel
CVE-2026-11986
Keycloak Admin UI REST Extensions: bulk role-removal endpoints fail to perform granular permission checks
Kritisch
CVE-2026-48062
CodeIgniter4 has a validation bypass when uploading file extensions via `ext_in` rule
Mittel
CVE-2026-48049
@hapi/inert has a static-file confinement bypass via sibling-prefix path
Hoch
CVE-2026-11816
Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/file_utils.py`. The functions `filter_safe_tarinfos()` and `filt
Mittel
CVE-2026-48043
netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion
Mittel
CVE-2026-48040
netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access
Hoch
CVE-2026-48068
@grpc/grpc-js: A malformed request can cause a server crash
Hoch
CVE-2026-48069
@grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash
Mittel
CVE-2026-48038
joi has an uncaught RangeError on deeply nested input through recursive `link()` schemas
Hoch
CVE-2026-48054
OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri
Mittel
CVE-2026-48022
@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects
Hoch
CVE-2026-48007
Element Call reports full URLs of visited pages to analytics server
Hoch
CVE-2026-48006
Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator
Mittel
CVE-2026-53723
guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injection via CDATA Terminator
Mittel
CVE-2026-48998
guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation
Mittel
CVE-2026-49214
guzzlehttp/psr7 has CRLF Injection via URI Host Component
Mittel
CVE-2026-9125
The Ultimate Video Player For WordPress <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link_url' Shortcode Attribute
Hoch
CVE-2026-5497
vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method. When processin
Mittel
CVE-2026-41001
Spring Boot: Predictable Temp Directory in Artemis Auto-configuration
Hoch
CVE-2026-41856
Spring for GraphQL: Annotation Detection Vulnerability
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.