Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 498
Wyczyść filtryWooCommerce Purchase Orders <= 1.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion
B Slider- Gutenberg Slider Block for WP <= 1.1.30 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin Installation
Premium Addons for KingComposer <= 1.1.1 - Unauthenticated Local File Inclusion
GravityWP - Merge Tags <= 1.4.4 - Unauthenticated Local File Inclusion
FundEngine <= 1.7.4 - Authenticated (Subscriber+) Local File Inclusion
CF7 WOW Styler <= 1.7.2 - Unauthenticated Local File Inclusion
Code Engine <= 0.3.3 - Authenticated (Contributor+) Remote Code Execution
Form Block <= 1.5.5 - Unauthenticated Arbitrary File Upload
ZoloBlocks <= 2.3.2 - Authenticated (Subscriber+) Local File Inclusion
Urna <= 2.5.7 - Unauthenticated Local File Inclusion
Xinterio <= 4.2 - Unauthenticated Local File Inclusion
Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution
JetReviews <= 3.0.0 - Authenticated (Contributor+) Local File Inclusion
WP Import Export Lite <= 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload
WP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File Upload
Rosalinda <= 1.2.3 - Unauthenticated Local File Inclusion
Shopo <= 1.1.4 - Authenticated (Contributor+) Arbitrary File Upload
Renewal <= 1.2.2 - Unauthenticated Local File Inclusion
Pinevale <= 1.0.14 - Unauthenticated Local File Inclusion
Giardino <= 1.1.10 - Unauthenticated Local File Inclusion
Katelyn <= 1.0.10 - Unauthenticated Local File Inclusion
Javo Core <= 3.0.0.266 - Unauthenticated Remote Code Execution
Alone < 7.8.5 - Unauthenticated Remote Code Execution
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.