Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 498
Wyczyść filtryAdvanced Ads – Ad Manager & AdSense <= 2.0.21 - Authenticated (Contributor+) Remote Code Execution
Motors – Car Dealership & Classified Listings Plugin <= 1.4.109 - Authenticated (Subscriber+) Local File Inclusion
Avada (Fusion) Builder <= 3.15.4 - Authenticated (Contributor+) Arbitrary File Deletion
Uncanny Automator Pro 7.3.0.5 - Maliciously Injected Backdoor
DoLeads Integrator <= 1.2.2 - Unauthenticated Remote Code Execution
WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) Arbitrary File Deletion via 'myaction' Parameter
King Addons for Elementor <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'form_page_id' Parameter
Premmerce Dev Tools <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via Plugin Creation
Photocart Link <= 1.6 - Unauthenticated Local File Inclusion
Brandfolder – Digital Asset Management Simplified. <= 3.0 - Unauthenticated Local File Inclusion
WANotifier <= 2.5 - Unauthenticated Local File Inclusion
Sigma Forms Pro <= 1.4.5 - Unauthenticated Arbitrary File Upload
PDF Builder for WooCommerce. Create invoices,packing slips and more <= 2.0.8 - Authenticated (Subscriber+) Remote Code Execution
FileOrganizer <= 1.1.0 - Authenticated (Authenticated+) Local File Inclusion
Workscout Core <= 1.7.11 - Unauthenticated Arbitrary File Deletion
IMDB Profile Widget <= 1.0.8 - Unauthenticated Local File Inclusion
Simple-Backup <= 2.7.11 - Unauthenticated Arbitrary File Download
Multiple Plugins <= Multiple Versions - Authenticated Remote Code Execution
Dharma Booking <= 2.28.3 - Unauthenticated Local File Inclusion
HB Audio Gallery Lite <= 1.0.0 - Unauthenticated Arbitrary File Download
Ultimate Product Catalog <= 4.4.48 - Authenticated (Contributor+) Arbitrary File Upload
Fediverse Embeds <= 1.5.7 - Unauthenticated Server-Side Request Forgery
WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite. <= 1.0.7 - Unauthenticated Arbitrary File Download
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.