Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 27
Wyczyść filtryLink Library <= 7.9.5 - Unauthenticated Server-Side Request Forgery
Link Library <= 7.9.5 - Reflected Cross-Site Scripting
Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter
Link Library <= 7.9.3 - Reflected Cross-Site Scripting
Link Library < 7.9.4 - Reflected Cross-Site Scripting
Link Library <= 7.9.2 - Unauthenticated SQL Injection
Link Library <= 7.8.8 - Authenticated (Contributor+) Arbitrary File Deletion
Link Library <= 7.8.7 - Authenticated (Contributor+) Server-Side Request Forgery
Resource Library for Logged In Users <= 1.5 - Cross-Site Request Forgery to Multiple Administrative Actions
Link Library <= 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters
Link Library <= 7.7.2 - Reflected Cross-Site Scripting
Link Library <= 7.7.1 - Reflected Cross-Site Scripting
Link Library <= 7.6.3 - Reflected Cross-Site Scripting
Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode
Link Library <= 7.6 - Reflected Cross-Site Scripting
Link Library <= 7.6.6 - Reflected Cross-Site Scripting
Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting
Link Library <= 7.5.13 - Reflected Cross-Site Scripting via 'link_price' and 'link_tags'
Link Library <= 7.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Link Library <= 7.2.7 - Cross-Site Request Forgery to Library Settings Reset
Link Library <= 7.2.8 - Reflected Cross-Site Scripting
Link Library <= 7.2.7 - Missing Authorization Checks
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.