Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryDTC Documents <= 1.1.05 - Cross-Site Request Forgery
Property Hive Stamp Duty Calculator <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
3D Avatar User Profile <= 1.0.0 - Reflected Cross-Site Scripting
Aphorismus <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Radio Player <= 2.0.83 - Unauthenticated Server-Side Request Forgery
Social Media Sharing <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Evernote Sync <= 3.0.0 - Reflected Cross-Site Scripting
jCarousel <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
MyParcel <= 4.24.1 - Reflected Cross-Site Scripting
WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Deletion
AppMaps <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Onlywire Multi Autosubmitter <= 1.2.4 - Cross-Site Request Forgery to Cross-Site Scripting
Rate My Post – Star Rating Plugin by FeedbackWP <= 4.2.4 - Unauthenticated Voting On Scheduled Posts
addWeather <= 2.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Category of Posts <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
PixProof <= 2.0.1 - Missing Authorization
Ui Slider Filter By Price <= 1.1 - Cross-Site Request Forgery
Floating Video Player <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Advanced Fancybox <= 1.1.1 - Cross-Site Request Forgery to Cross-Site Scripting
AHAthat <= 1.6 - Reflected Cross-Site Scripting
WP Controller <= 3.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP-Ban-User <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.16.4 - Authenticated (Subscriber+) HTML File Upload (Stored Cross-Site Scripting)
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.