Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 1 125
Wyczyść filtryImageMagick has a Stack Overflow in DestroyXMLTree()
ImageMagick has a heap-Buffer-Overflow write of a single zero byte when parsing xml.
ImageMagick has an integer overflow in despeckle operation causing a heap buffer overflow on 32-bit builds
ImageMagick has a heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds
DNN: Same HostGUID for all new installs
DNN: Force Friend Request Acceptance
DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload
Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory
AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction
ImageMagick: META reader memory leak in the APP1JPEG input path
ImageMagick has possible memory leak in ASHLAR coder when action fails
ImageMagick has an Out-of-bounds Write via InterpretImageFilename
ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression Evaluation
Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString
Scriban has Uncontrolled Recursion in `object.to_json` Causing Unrecoverable Process Crash via StackOverflowException
Scriban: Uncontrolled Memory Allocation via string.pad_left/pad_right Allows Remote Denial of Service
Scriban: Built-in operations bypass LoopLimit and delay cancellation, enabling Denial of Service
Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuse
Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset()
Scriban has a Stack Overflow via Nested Array Initializers That Bypass the ExpressionDepthLimit Fix
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.