Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 610
DoS vulnerability in MaliciousCode filter
Fix for arbitrary file deletion in customer media allows for remote code execution
Fix for arbitrary command execution in custom layout update through blocks
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.
Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.
Booking calendar, Appointment Booking System <= 3.2.3 - Cross-Site Request Forgery
Quick Restaurant Menu <= 2.0.2 - Insecure Direct Object Reference
Booking calendar, Appointment Booking System <= 3.2.3 - Unauthenticated Bypass Vulnerability
DH – Anti AdBlocker <= 36 - Cross-Site Request Forgery
Booking calendar, Appointment Booking System <= 3.2.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Site Reviews <= 6.2.0 - Unauthenticated CSV Injection
Blocksy Companion <= 1.8.67 - Authenticated (Contributor+) Stored Cross-Site Scripting
Organization chart <= 1.4.4 - Cross-Site Request Forgery
WP Table Manager <= 3.5.2 - Missing Authorization
Quick Restaurant Menu <= 2.0.2 - Authenticated (Administrator+) Cross-Site Scripting
BNE Testimonials <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
ContentStudio <= 1.2.5 - Authorization Bypass
Glossary <= 2.1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Material Design Icons for Page Builders <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Quick Restaurant Menu <= 2.0.2 - Cross-Site Request Forgery
JS Help Desk <= 2.7.1 - Cross-Site Request Forgery
Greenshift – animation and page builder blocks <= 4.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.