Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtrySermon'e <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Contact Form Maker <= 1.13.23 - Authenticated (Administrator+) SQL Injection
Recipe Maker For Your Food Blog from Zip Recipes <= 8.0.7 - Cross-Site Request Forgery
CHP Ads Block Detector <= 3.9.4 - Cross-Site Request Forgery via chp_abd_action
Flo Forms <= 1.0.40 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Affiliate Links <= 0.1.1 - Reflected Cross-Site Scripting
Constant Contact Forms <= 2.0.2 - Missing Authorization via constant_contact_privacy_ajax_handler
WP Matterport Shortcode <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Zip Recipes <= 8.0.7 - Cross-Site Request Forgery
CHP Ads Block Detector <= 3.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
breadcrumb simple <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
CHP Ads Block Detector <= 3.9.4 - Missing Authorization to Plugin Settings Update
MasterStudy LMS <= 3.0.8 - Missing Authorization to Course Category Creation
MasterStudy LMS <= 3.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
NextGen GalleryView <= 0.5.5 - Reflected Cross-Site Scripting
myCred <= 2.5 - Cross-Site Request Forgery
Stock Manager for WooCommerce <= 2.10.0 - Cross-Site Request Forgery
Form Maker <= 1.15.16 - Missing Authorization in check_score
Fat Rat Collect <= 2.6.0 - Missing Authorization
Church Admin <= 3.7.29 - Reflected Cross-Site Scripting
MStore API <= 3.9.6 - Cross-Site Request Forgery to Firebase Server Key Update
MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update
MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Update
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.