Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 20
Wyczyść filtryModern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection
Modern Events Calendar <= 7.21.9 - Information Exposure
Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery
Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload
Modern Events Calendar lite < 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Modern Events Calendar lite < 6.10.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Modern Events Calendar Lite <= 6.2.9 - Authenticated (Contributor+) Cross-Site Scripting
Modern Events Calendar Lite <= 6.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Modern Events Calendar Lite <= 6.3.0 - Stored Cross-Site Scripting
Modern Events Calendar Lite <= 6.1.6 - Subscriber+ Category Add Leading to Stored Cross-Site Scripting
Modern Events Calendar Lite <= 6.1.0 - Reflected Cross-Site Scripting via current_month_divider parameter
Modern Events Calendar Lite <= 6.1.4 - Unauthenticated Blind SQL Injection via time Parameter
Modern Events Calendar Lite <= 5.22.2 - Authenticated Stored Cross Site Scripting
Modern Events Calendar Lite < 5.22.1 - Admin+ Stored Cross-Site Scripting
Modern Events Calendar Lite <= 5.16.4 - Authenticated Arbitrary File Upload leading to Remote Code Execution
Modern Events Calendar Lite <= 5.16.5 - Authenticated SQL Injection
Modern Events Calendar Lite <= 5.16.4 - Authenticated Stored Cross-Site Scripting
Modern Events Calendar Lite <= 5.16.4 - Unauthenticated Events Export
Modern Events Calendar Lite <= 5.1.6 - Missing Authorization to Stored Cross-Site Scripting and Settings Update
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.