Anwendungssicherheit
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-56303: High Schwachstelle
Capgo before 12.128.2 contains an information disclosure vulnerability in the find_apikey_by_value PostgreSQL function marked SECURITY DEFINER and executable by the...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-9282: High Schwachstelle
The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.4...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-4661: High Schwachstelle
The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to time-based blind SQL...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-10666: High Schwachstelle
parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c.d:port") copies the port substring into a fixed 17-byte...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-7655: High Schwachstelle
The SureCart plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 4.2.3....
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-15481: High Schwachstelle
A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects the function ipoa_test of the...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-15480: High Schwachstelle
A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-15155: High Schwachstelle
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Authenticated Account Takeover...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-56260: Critical Schwachstelle
Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The output_path...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-56271: Critical Schwachstelle
Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token', 'refresh_token') and default audience and...