Hoch
CVE-2026-48922
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.587
Mittel
CVE-2026-48919
Jenkins Active Directory Plugin deserializes data from LDAP referrals without validation
Mittel
CVE-2026-48918
Jenkins Active Directory Plugin follows LDAP referrals by default
Hoch
CVE-2026-48920
Jenkins Email Extension Plugin: Attackers able to control email content may specify `file:` URLs for images to read arbitrary files from Jenkins controller filesystem
Mittel
CVE-2026-48917
Jenkins LDAP Plugin deserializes data from LDAP referrals without validation
Mittel
CVE-2026-48916
Jenkins LDAP Plugin follows LDAP referrals
Hoch
CVE-2026-48921
Jenkins Pipeline: Groovy Libraries Plugin does not prohibit symbolic links in shared libraries
Mittel
CVE-2026-9704
Keycloak Vulnerable to Improper Validation of Specified Quantity in Input
Mittel
CVE-2026-9228
Timetable and Event Schedule by MotoPress <= 2.4.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via action_get_event_data Function
Hoch
CVE-2026-2374
Login No Captcha reCAPTCHA <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via PHP_SELF
Mittel
CVE-2026-5737
Independent Analytics <= 2.14.9 - Unauthenticated Server-Side Request Forgery via Tracking Route
Hoch
CVE-2026-7802
Frontend Admin by DynamiApps <= 3.29.2 - Missing Authorization to Authenticated (Subscriber+) Account Takeover via 'user_id' URL Query Parameter
Mittel
CVE-2026-9241
FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter
Mittel
CVE-2026-47104
libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB
Mittel
CVE-2026-23679
libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface clai
Mittel
CVE-2026-9689
Keycloak Services has Improper Validation of Consistency within Input
Mittel
CVE-2026-4888
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending
Hoch
CVE-2026-49014
In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow. It reads a geometry attribute into a fixed-size stack buffer witho
Mittel
CVE-2026-44979
@hapi/wreck leaks sensitive `Proxy-Authorization` header across cross-hostname redirects
Hoch
CVE-2026-44974
@hapi/content header parser has a parameter smuggling issue that allows upload-filter bypass via duplicate parameters
Hoch
CVE-2026-44741
Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter
Hoch
CVE-2026-44739
Pimcore Vulnerable to SQL Injection in Custom Reports Column Configuration
Hoch
CVE-2026-44705
tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape
Mittel
CVE-2026-44646
LiquidJS's `{% render %}` tag silently bypasses per-render `ownPropertyOnly:true` via `Context.spawn()`
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.