Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryCraw Data <= 1.0.0 - Server Side Request Forgery
Social Media Share Buttons <= 3.8.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Post SMTP Mailer/Email Log <= 2.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
BuddyPress xProfile Checkout Manager for WooCommerce <= 1.3.5 - Stored Cross-Site Scripting
WP Server Health Stats <= 1.6.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
OneTone Companion <= 1.1.1 - Open Mailer
Mobile Events Manager <= 1.4.7 - Authenticated (Administrator+) CSV Injection
All-in-One Video Gallery 2.5.8 - 2.6.0 - Arbitrary File Download & Server-Side Request Forgery
Scroll To Top <= 1.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Accordion <= 2.2.43 - Authenticated (Admin+) Stored Cross-Site Scripting
Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization
Titan Anti Spam & Security <= 7.3.0 - IP Spoofing to Protection Bypass
WP STAGING – Backup Duplicator & Migration <= 2.9.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
Make, formerly Integromat Connector <= 1.5.1 - Missing Authorization to Arbitrary Options Update
Float to Top Button <= 2.3.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Gallery PhotoBlocks <= 1.2.8 - Missing Authorization Checks
Affiliates Manager <= 2.9.13 - Reflected Cross-Site Scripting
Affiliates Manager <= 2.9.13 - Cross-Site Request Forgery
Affiliates Manager <= 2.9.13 - CSV Injection
Login No Captcha reCAPTCHA <= 1.6.11 - CAPTCHA Bypass via Whitelisted IP Address Spoofing
Affiliates Manager <= 2.9.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Corner Ad <= 1.0.53 - Reflected Cross-Site Scripting
Database Management tool – Adminer <= 1.1.5 - Information Exposure
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.