Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryPaid Member Subscriptions <= 2.15.9 - Missing Authorization
PDF for WPForms <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
RumbleTalk Live Group Chat <= 6.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordPress Assistant <= 1.5.2 - Reflected Cross-Site Scripting
Dadevarzan WordPress Common <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
atec Debug <= 1.2.22 - Authenticated (Administrator+) Arbitrary File Deletion
Mail Mint <= 1.18.5 - Authenticated (Administrator+) SQL Injection
Brizy <= 2.7.12 - Missing Authorization
Quiz And Survey Master <= 10.2.5 - Unauthenticated PHP Object Injection
Tickera <= 3.5.5.6 - Cross-Site Request Forgery
Orbit Fox by ThemeIsle <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Booking Ultra Pro <= 1.1.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
Exit Intent Popup <= 1.0.1 - Unauthenticated Server-Side Request Forgery
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read
SureForms – Drag and Drop Form Builder for WordPress <= 1.9.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Catwalk <= 1.4 - Unauthenticated Local File Inclusion
EcoGrow <= 1.7 - Unauthenticated Local File Inclusion
Rally <= 1.1 - Unauthenticated Local File Inclusion
Algenix <= 1.0 - Unauthenticated Local File Inclusion
Today's Date Inserter <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alright <= 1.6.1 - Unauthenticated Local File Inclusion
Convex <= 1.11 - Unauthenticated Local File Inclusion
Easy Flash Embed <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.