Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 587
Atarim <= 3.12 - Unauthenticated Cross-Site Scripting
Actueel Financieel Nieuws – Denk Internet Solutions <= 5.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Ovic Responsive WPBakery <= 1.2.8 - Authenticated (Subscriber+) Arbitrary Option Update
Patreon WordPress <= 1.8.7 - Cross-Site Request Forgery
WP Edit Username <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Restrict Categories <= 2.6.4 - Reflected Cross-Site Scripting via rc-search
WooCommerce Product Table Lite <= 2.6.2 - Cross-Site Request Forgery
BZScore – Live Score <= 1.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Amazonify <= 0.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Extra Product Options for WooCommerce <= 4.1 - Authenticated (Shop manager+) Stored Cross-Site Scripting via plugin settings
EazyDocs <= 2.3.5 - Unauthenticated Stored Cross-Site Scripting via edit_doc_one_page
ANAC XML Bandi di Gara <= 7.5 - Cross-Site Request Forgery via settings.php
Under Construction / Maintenance Mode from Acurax <= 2.6 - Unauthenticated Cross-Site Scripting
Edit WooCommerce Templates <= 1.1.1 - Unauthenticated Cross-Site Scripting
Amazonify <= 0.8.1 - Cross-Site Request Forgery to Amazon Tracking ID Update
SendPress Newsletters <= 1.23.11.6 - Reflected Cross-Site Scripting
Add Local Avatar <= 12.1 - Cross-Site Request Forgery via manage_avatar_cache
Best Restaurant Menu by PriceListo <= 1.3.1 - Cross-Site Request Forgery via menu_page
ANAC XML Bandi di Gara <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
EazyDocs <= 2.3.5 - Missing Authorization via doc_one_page and edit_doc_one_page
Category Post List Widget <= 2.0 - Cross-Site Request Forgery via get_cplw_settings
Exposure of Private Personal Information to an Unauthorized Actor in Silbersaiten - Order Duplicator – Clone and Delete Existing Order module for PrestaShop
Exposure of Private Personal Information to an Unauthorized Actor in Smart Soft - Advanced Export Products Orders Cron CSV Excel module for PrestaShop
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.