Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 620
Wyczyść filtryLibreNMS has a Persistent XSS from Insecure Input Sanitization Affects Multiple Endpoints
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.php
LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/functions.php
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php
Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php
LibreNMS has a stored XSS in ExamplePlugin with Device's Notes
LibreNMS has a stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/api-access.inc.php
Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI
Craft CMS Arbitrary System File Read
Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution
Admidio Vulnerable to HTML Injection In The Messages Section
PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery when opening XLSX file
Cross-site Scripting via uploaded SVG
LibreNMS vulnerable to Stored Cross-site Scripting via File Upload
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Transports" feature
LibreNMS has Stored Cross-site Scripting vulnerability in "Device Group" Name
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Rules" feature
LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Templates" feature
LibreNMS has Stored Cross-site Scripting vulnerability in "Device Dependencies" feature
starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field
Concrete CMS stored XSS vulnerability in the "Top Navigator Bar" block
Kimai has an XXE Leading to Local File Read
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.