Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 19
Restablecer filtrosDitty – Responsive News Tickers, Sliders, and Lists <= 3.1.69 - Authenticated (Author+) Stored Cross-Site Scripting
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.67 - Missing Authorization
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.66 - Missing Authorization
Ditty <= 3.1.65 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via ditty_init AJAX Action
Ditty <= 3.1.58 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ditty <= 3.1.57 - Unauthenticated Server-Side Request Forgery
Ditty <= 3.1.51 - Authenticated (Author+) Stored Cross-Site Scripting
Ditty <= 3.1.46 - Authenticated (Author+) Stored Cross-Site Scripting
Ditty 3.1.39 - 3.1.45 - Authenticated (Author+) Stored Cross-Site Scripting
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.44 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.42 - Authenticated (Author+) Stored Cross-Site Scripting
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.38 - Authenticated (Contributor+) PHP Object Injection
Ditty <= 3.1.35 - Authenticated (Author+) Stored Cross-Site Scripting
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.31 - Authenticated (Author+) Stored Cross-Site Scripting
Ditty <= 3.1.24 - Missing Authorization via save_ditty_permissions_check
Ditty <= 3.1.24 - Reflected Cross-Site Scripting
Ditty <= 3.0.32 - Authenticated (Contributor+) Stored Cross-Scripting via Shortcode
Ditty (formerly Ditty News Ticker) <= 3.0.14 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.