Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryGoogle Language Translator <= 6.0.9 - Authenticated Cross-Site Scripting
HM Multiple Roles <= 1.2 - Privilege Escalation via Arbitrary Role Change
Elementor Addon Elements <= 1.11.7 - Cross-Site Request Forgery
Smash Balloon Plugins (Various Versions) - Reflected Cross-Site Scripting
RestroPress <= 2.8.3 - Missing Authorization
Light Messages <= 1.0 - Authenticated (Admin+) Cross-Site Scripting
Shantz WordPress QOTD <= 1.2.2 - Cross-Site Request Forgery
PhoneTrack Meu Site Manager <= 0.1 - Cross-Site Scripting
Wonder Video Embed <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Verse-O-Matic <= 4.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Custom Login Redirect <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Photo Gallery by 10Web <= 1.5.78 - Stored Cross-Site Scripting via Uploaded SVG
VikRentCar Car Rental Management System < 1.1.10 - Authenticated (Admin+) Stored Cross-Site Scripting
RestroPress <= 2.8.2 - Cross-Site Request Forgery to Cart Manipulation
NEX-Forms <= 7.8.7 Authorization Bypass
తెలుగు బైబిల్ వచనములు <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
Profile Builder <= 3.4.8 - Admin Access via Password Reset
Mimetic Books <= 0.2.13 - Authenticated (Admin+) Stored Cross-Site Scripting
YouTube Embed <= 5.2.1 - Contributor+ Stored Cross-Site Scripting
Wonder PDF Embed <= 1.6 - Contributor+ Stored Cross-Site Scripting
LearnPress <= 3.2.6.7 - SQL Injection
My Site Audit <= 1.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Social Tape <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.