Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryWP Bulletin Board <= 1.1.4 - Reflected Cross-Site Scripting
WP Smart TV <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Envo Multipurpose <= 1.1.6 - Missing Authorization
S-DEV SEO <= 1.88 - Authenticated (Contributor+) Stored Cross-Site Scripting
turboSMTP <= 4.6 - Reflected Cross-Site Scripting
Rocket Media Library Mime Type <= 2.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Setup Default Featured Image <= 1.2 - Missing Authorization
WP ULike <= 4.7.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Musicbox <= 2.0.3 - Reflected Cross-Site Scripting
Image Gallery – Responsive Photo Gallery <= 1.0.5 - Reflected Cross-Site Scripting
JustRows free <= 0.2 - Reflected Cross-Site Scripting
Amber <= 1.4.4 - Reflected Cross-Site Scripting
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Giga Messenger – Express <= 2.3.1 - Reflected Cross-Site Scripting
GSheetConnector for Forminator Forms <= 1.0.12 - Reflected Cross-Site Scripting
TransFinanz <= 1.0.0 - Reflected Cross-Site Scripting
iBuildApp <= 0.2.0 - Reflected Cross-Site Scripting
User Management <= 1.1 - Authenticated (Subscriber+) Privilege Escalation
BuddyBoss Platform < 2.7.60 - Insecure Direct Object Reference to Private Post Comment Exposure
WpTravelly <= 1.8.5 - Missing Authorization
Zarinpal Paid Download <= 2.3 - Reflected Cross-Site Scripting
Contact Form 7 Redirect & Thank You Page <= 1.0.7 - Reflected Cross-Site Scripting
NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.