Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 40
Wyczyść filtryBrizy – Page Builder <= 2.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rootAttributes' Parameter
Brizy – Page Builder < 2.8.18 - Authenticated (Contributor+) Information Exposure
Brizy - Page Builder <= 2.8.18 - Insecure Direct Object Reference to Authenticated (Contributor+) Template Type Update
Brizy - Page Builder <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Brizy - Page Builder <= 2.8.18 - Authenticated (Author+) Stored Cross-Site Scripting
Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value
Brizy <= 2.7.23 - Missing Authorization
Brizy – Page Builder <= 2.7.16 - Authenticated (Contributor+) Sensitive Information Exposure via get_users Function
Brizy <= 2.7.12 - Missing Authorization
Brizy <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload
Brizy Pro <= 2.8.0 - Cross-Site Request Forgery
Brizy Pro <= 2.8.0 - Missing Authorization
Brizy <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads
Brizy Pro <= 2.8.0 - Reflected Cross-Site Scripting
Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery
Brizy – Page Builder <= 2.4.44 - Authenticated (Contributor+) Arbitrary File Upload
Brizy – Page Builder <= 2.4.44 - Missing Authorization to Authenticated (Contributor+) Post Modification
Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality
Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form
Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL
Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.