Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 609
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_order
Responsive Pricing Table <= 5.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Yellow Yard Searchbar <= 2.7.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder
Slider by Supsystic <= 1.8.6 - Cross-Site Request Forgery
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_delete_folder
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folder
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_save_folder
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_folder_order
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folder
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_add_folder
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state
Auto Featured Image (Auto Post Thumbnail) <= 3.9.15 - Authenticated (Author+) Arbitrary File Upload
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_move_object
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder
J-BusinessDirectory - Other
tinymighty WikiSEO is vulnerable to cross-site scripting via modifyHTML function
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been rated as problematic. This issue affects some unknown processing of the file src/evesrp/views/api.py of the comp
create-choo-app3 is vulnerable to Command Injection via the devInstall function
semver-tags is vulnerable to Command Injection via the getGitTagsRemote function
Cost of Goods for WooCommerce <= 2.8.6 - Cross-Site Request Forgery in save_costs
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.