Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 609
Cross-site Scripting in Jenkins Email Extension Plugin
Cross-site Scripting in Jenkins Email Extension Plugin
Cross-site Scripting in Jenkins JUnit Plugin
Cross-site Scripting in Jenkins Pipeline: Build Step Plugin
Missing Authorization in Jenkins Azure Credentials Plugin
Missing Authorization in Jenkins Azure Credentials Plugin
Cross-Site Request Forgery in Jenkins Azure Credentials Plugin
Sandbox escape in Jenkins Email Extension Plugin
Denial of service vulnerability when parsing multipart request body
Privilege escalation in Apache ShenYu
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart f
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.5.14 - Cross-Site Request Forgery
Wp-Insert <= 2.5.0 Authenticated (Admin+) Stored Cross Site Scripting
Meta Slider and Carousel with Lightbox <= 1.6.2 - Cross-Site Request Forgery
Upload File Type Settings Plugin <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Ultimate WP Query Search Filter <= 1.0.10 - Authenticated (Contributor+) Stored Cross Site Scripting
Nooz <= 1.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Service Area Postcode Checker <= 2.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
TeraWallet – For WooCommerce <= 1.3.24 - Cross-Site Request Forgery via admin_options
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.5.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Open Social <= 5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Quick Paypal Payments <= 5.7.25 - Authenticated (Contributor+) Cross Site Scripting
Podlove Subscribe button <= 1.3.7 - Cross-Site Request Forgery via save function
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.