Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryScripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload
Download Manager <= 3.2.54 - Authenticated (Admin+) Path Traversal
Login Block IPs <= 1.0.0 - IP Spoofing to Protection Mechanism Bypass
WP Shamsi <= 4.1.1 - Missing Authorization to Plugin Settings Update
Slider Hero <= 8.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
SEO Smart Links <= 3.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
SVG Support <= 2.4.2 - Authenticated (Author+) Stored Cross-Site Scripting
CM Download Manager <= 2.8.5 - Authenticated (Administrator+) Arbitrary File Upload
Meet My Team <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Pop-up <= 1.1.5 - Privilege Escalation
Welcart e-Commerce 2.6.0-2.7.7 - Information Disclosure via Arbitrary File Read
History Timeline <= 1.0.5 - Authenticated (Author+) Stored Cross-Site Scripting
Mega Addons For WPBakery Page Builder <= 4.2.7 - Cross-Site Request Forgery to Settings Update
Torro Forms <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Cerber Security <= 9.0 - User Enumeration Bypass
WHA Crossword <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Word Search Puzzles game <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Word Search Puzzles game <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting
Blossom Recipe Maker <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Captcha Code <= 2.7 - Cross-Site Request Forgery to Plugin Settings Update
CallRail Phone Call Tracking <= 0.4.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Easy Org Chart <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Rate my Post – WP Rating System <= 3.3.4 - Race Condition
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.