Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 21
Wyczyść filtryAll-in-One WP Migration and Backup <= 7.110 - Authenticated (Admin+) Privilege Escalation
All-in-One WP Migration Unlimited Extension <= 2.84 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ai1wm_backups_path' Parameter
All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution
All-in-One WP Migration and Backup < 7.108 - Authenticated (Administrator+) Remote Code Execution
All-in-One WP Migration and Backup <= 7.105 - Missing Authorization
All-in-One WP Migration Unlimited Extension <= 2.83 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File Download
All-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import
All in One WP Migration <= 7.89 - Unauthenticated PHP Object Injection
All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection
All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs
Multiple ServMask Plugins <= (Various Versions) - Missing Authorization to Access Token Update
All-in-One WP Migration <= 7.62 - Unauthenticated Reflected Cross-Site Scripting
All-in-One WP Migration <= 7.62 - Authenticated (Admin+) Cross-Site Scripting
All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts
All-in-One WP Migration <= 7.40 - Authenticated (Admin+) Arbitrary File Upload
All-in-One WP Migration <= 7.14 - Unauthenticated Backup Download
All-in-One WP Migration <= 6.97 - Authenticated Stored Cross-Site Scripting
All-in-One WP Migration <= 6.45 - Reflected Cross-Site Scripting
All-in-One WP Migration <= 2.0.4 - Missing Authorization to Database Export
All-in-One WP Migration <= 2.0.2 - Authorization Bypass to Arbitrary File Upload
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.