Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 524
Wyczyść filtryUmbraco CMS contains a server-side request forgery vulnerability
UmbracoForms Vulnerable to Remote Code Execution via Untrusted WSDL Compilation in Dynamic SOAP Client Generation
AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value
ImageMagick's failure to limit MVG mutual causes Stack Overflow
ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack
Amazon S3 Encryption Client for .NET has a Key Commitment Issue
ABP Account Module has an Open Redirect through Improper validation in its register function
ImageMagick is vulnerable to an integer Overflow in TIM decoder leading to out of bounds read (32-bit only)
Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality
DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload
DNN CKEditor Provider allows unauthenticated upload out-of-the-box
ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)
ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)
Mammoth is vulnerable to Directory Traversal
Apache ActiveMQ NMS AMQP Client has a Deserialization of Untrusted Data vulnerability
Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability
Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability
Amazon.IonDotnet is vulnerable to Denial of Service attacks
Akka.Remote TLS did not properly implement certificate-based authentication
FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint
DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile
DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.