Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 609
Limit Login Attempts <= 5.5 - Unauthenticated SQL Injeciton
PDF Builder for WooCommerce. Create invoices,packing slips and more <= 1.2.136 - Reflected Cross-Site Scripting
Clickbank WordPress Plugin (Storefront) <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WPForms <= 1.9.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection
Country Blocker <= 3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Event Tickets with Ticket Scanner <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Shiptimize for WooCommerce <= 3.1.86 - Reflected Cross-Site Scripting
Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
Designer <= 1.4.1 - Authenticated (Contributor+) Local File Inclusion
Ni WooCommerce Bulk Product Editor <= 1.4.5 - Reflected Cross-Site Scripting
NewsMash <= 1.0.71 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ni WooCommerce Order Export <= 3.1.6 - Reflected Cross-Site Scripting
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection
Minimum and Maximum Quantity for WooCommerce <= 2.0.0 - Missing Authorization
Wot Elementor Widgets <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Prodigy Commerce <= 3.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization
Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.7 - Missing Authorization
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ni CRM Lead <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
Spring LDAP data exposure vulnerability
Firepad allows insecure document access
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.