Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryWPQA - Builder forms Addon For WordPress < 5.2 - Stored Cross-Site Scripting via Profile fields
Social Stickers <= 2.2.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Donorbox – Free Recurring Donation Form <= 7.1.6 - Cross-Site Scripting
Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File Read
Easy Call With Twilio <= 1.0.4 - Stored Cross-Site Scripting
Cab fare calculator <= 1.0.3 - Unauthenticated Local File Inclusion
BulletProof Security <= 6.0 - Stored Cross-Site Scripting
Bulk Edit and Create User Profiles – WP Sheet Editor <= 1.5.13 - Cross-Site Scripting
Fusion Builder <= 3.6.1 & Avada <= 7.6.1 - Unauthenticated Server-Side Request Forgery
AGIL(Automatic Grid Image Listing) <= 1.0 - Arbitrary File Upload
Advanced Image Sitemap <= 1.2 - Reflected Cross-Site Scripting
Custom TinyMCE Shortcode Button <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Popup Maker <= 1.16.4 - Authenticated (Admin+) Cross-Site Scripting
External Media without Import <= 1.1.2 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
th23 Social <= 1.2.0 - Stored Cross-Site Scripting
BMI BMR Calculator <= 1.3 - Reflected Cross-Site Scripting
Videos sync PDF <= 1.7.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Advanced uploader <= 4.2 - Authenticated (Subscriber+) Arbitrary File Upload
Visual Slide Box Builder <= 3.2.9 - Authenticated (Subscriber+) SQL Injection
VikBooking Hotel Booking Engine & PMS <= 1.5.3 - Sensitive Information Exposure
VikBooking Hotel Booking Engine & PMS <= 1.5.3 - Arbitrary File Upload
Slide Anything – Responsive Content / HTML Slider and Carousel <= 2.3.43 - Editor+ Cross-Site Scripting
Popup by Supsystic <= 1.10.8 - Sensitive Information Disclosure
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.