Hoch
CVE-2026-44578
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.587
Mittel
CVE-2026-44576
Next.js vulnerable to cache poisoning in React Server Component responses
Hoch
CVE-2026-44575
Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes
Hoch
CVE-2026-44574
Next.js has a Middleware / Proxy bypass through dynamic route parameter injection
Hoch
CVE-2026-44573
Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n
Mittel
ghsa-88q9-cmp2-c2vq
oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)
Hoch
ghsa-w94c-4vhp-22gx
@vitejs/plugin-rsc has a Denial of Service Vulnerability in React Server Components
Hoch
ghsa-8h8q-6873-q5fj
Next.js Vulnerable to Denial of Service with Server Components
Hoch
CVE-2026-23870
Facebook React has a Denial of Service Vulnerability in React Server Components
Hoch
CVE-2026-44902
Prometheus exporter process crash via malformed HTTP request
Hoch
CVE-2026-56400
Open WebUI has a CORS misconfiguration and session validation issue
Hoch
CVE-2026-44339
PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute
Kritisch
CVE-2026-44336
PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection
Mittel
CVE-2026-43826
The OpenSearch logging provider, when configured with a `host` URL that embeds credentials (for example `https://user:password@server.example.com:9200`), wrote the full host URL — including the embedd
Mittel
CVE-2026-41018
Apache Airflow Providers Elasticsearch: Elasticsearch task-log handlers leak credentials embedded in the host URL
Hoch
CVE-2026-4935
OttoKit: All-in-One Automation Platform < 1.1.23 - Unauthenticated SQL Injection
Hoch
CVE-2021-47935
Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log en
Kritisch
CVE-2021-47932
TheCartPress eCommerce Shopping Cart <= 1.5.3.6 - Unauthenticated Privilege Escalation
Mittel
CVE-2026-42666
Salon Booking System – Free Version <= 10.30.25 - Missing Authorization
Hoch
CVE-2021-47941
WordPress Survey & Pol <= 1.5.7.3 - Unauthenticated SQL Injection
Mittel
CVE-2022-50959
Contact Form Builder, Contact Widget <= 1.6.1 - Reflected Cross-Site Scripting
Mittel
CVE-2022-50960
International Sms For Contact Form 7 Integration <= 1.2 - Reflected Cross-Site Scripting
Mittel
CVE-2026-42667
Online Scheduling and Appointment Booking System – Bookly <= 27.4 - Unauthenticated Information Exposure
Mittel
CVE-2026-8213
A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manipu
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.