Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryEvents Made Easy <= 2.2.80 - SQL Injection
Hotel Booking < 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Private Messages For WordPress <= 2.1.10 - Stored Cross-Site Scripting
Private Messages For WordPress <= 2.1.10 - Cross-Site Request Forgery
Image Slider by NextCode <= 1.1.2 - Cross-Site Request Forgery to Slide Deletion
Image Slider by NextCode <= 1.1.2 - Multiple Cross-Site Request Forgery
Post Grid, Slider & Carousel Ultimate <= 1.4.3 - Authenticated (Admin+) Cross-Site Scripting
Seamless Donations: A Platform for Global Fundraising and Rebuilding using Stripe and PayPal <= 5.1.7 - Cross-Site Request Forgery to Settings Chage
underConstruction <= 1.19 - Cross-Site Request Forgery to Construction Mode Disabled
Mail Subscribe List <= 2.1.3 - Cross-Site Request Forgery
Envato Sales By Item <= 1.1 - Unauthenticated SQL Injection via AJAX call
Mail Subscribe List <= 2.1.6 - Stored Cross-Site Scripting
OTP Login Woocommerce & Gravity Forms <= 2.0 - Cross-Site Scripting
Image Slider by NextCode <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting
BuddyForms Hook Fields <= 1.3.8 - Cross-Site Scripting
underConstruction <= 1.20 - Authenticated (Admin+) Stored Cross-Site Scripting
VS Contact Form <= 11.5 - Reflected Cross-Site Scripting
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.3.9.5 - Authenticated Cross-Site Scripting
Codup Read Only Admin <= 1.1.1.7 - Cross Site Scripting
Dropdown and scrollable Text <= 2.0 - Cross-Site Scripting
Wbcom Designs – BuddyPress Group Reviews <= 2.8.1 - Cross-Site Scripting
Direct Checkout for WooCommerce – Skip Cart with Buy Buttons <= 1.2 - Cross-Site Request Forgery to Settings Update
Easy PayPal Shopping Cart <= 1.1.9 - Cross-Site Request Forgery to Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.