Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 7 072
Wyczyść filtryhsweb-framework has a Path Traversal issue
Keycloak: Information disclosure due to user profile permission bypass
Apache Fory Java SDK Has Deserialization of Untrusted Data in the Java replace-resolve path
epa4all-client: Unauthenticated REST API for Patient Record Writes
Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass
Apache Calcite is Vulnerable to Use of Externally-Controlled Input to Select Classes
Spring Cloud Function Context has Uncontrolled Recursion
Spring Cloud Function Context: Uncontrolled Recursion is possible while attempting to add infinite amount of functions to Function Registry
Logback vulnerable to Object Injection through HardenedObjectInputStream modules
Apache Fesod is vulnerable to Server-Side Request Forgery through its UrlImageConverter component
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability
Apache MINA SSHD bundle sshd-git has a path traversal vulnerability
Apache ActiveMQ server has an incomplete authorization workflow
Apache ActiveMQ has an Incorrect Default Permissions vulnerability
Apache Fluss: Unauthenticated remote attackers can exhaust JVM heap memory using crafted frame headers via TabletServer/CoordinatorServer
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
Apache Solr has hardcoded credentials in the Basic Authentication setup tool
Apache ActiveMQ, Apache ActiveMQ Web have a Cross-site Scripting issue
Apache Directory LDAP API lacks server certificate verification for LDAP hostnames
CC-Tweaked has an SSRF Protection Bypass with NAT64
Apache Artemis has an Incorrect Authorization issue
QOS.CH Sarl logback logback-core has a deserialization of untrusted data vulnerability
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.