Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 498
Wyczyść filtrySmart Custom 404 Error Page <= 11.4.7 - Reflected Cross-Site Scripting
Social Web Suite – Social Media Auto Post, Social Media Auto Publish <= 4.1.11 - Directory Traversal to Arbitrary File Download
WP Hotel Booking <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File Upload
MaxSlider <= 1.2.3 - Authenticated (Contributor+) Local File Inclusion
Top Bar – PopUps – by WPOptin <= 2.0.1 - Unauthenticated Local File Inclusion
Iconize <= 1.2.4 - Authenticated (Admin+) Remote Code Execution
Hello World <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read
Wechat Social login <= 1.3.0 - Unauthenticated Arbitrary File Upload
GTM Server Side <= 2.1.19 - Reflected Cross-Site Scripting
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion
WP Timeline – Vertical and Horizontal timeline plugin <= 3.6.7 - Authenticated (Contributor+) Local File Inclusion
WP Timeline – Vertical and Horizontal timeline plugin <= 3.6.7 - Unauthenticated Local File Inclusion
Cities Shipping Zones for WooCommerce <= 1.2.7 - Authenticated (Shop Manager+) Local File Inclusion
Bit Form – Contact Form Plugin <= 2.13.10 - Authenticated (Administrator+) Arbitrary File Upload
Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload
Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale
Vmax Project Manager <= 1.0 - Unauthenticated Local File Inclusion
WP Ticket Ultra Help Desk & Support Plugin <= 1.0.5 - Unauthenticated Local File Inclusion
CSS JS Files <= 1.5.0 - Authenticated (Admin+) Arbitrary File Read
WP Newsletter Subscription <= 1.1 - Unauthenticated Local File Inclusion
Checkout Mestres WP <= 8.6 - Authenticated (Admin+) Local File Inclusion
VR Calendar <= 2.4.4 - Unauthenticated Local File Inclusion
MH Board <= 1.3.2.1 - Unauthenticated Local File Inclusion
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.