Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 757
Dataverse Integration 2.77 - 2.81 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via reset_password_link REST Route
ImageMagick has XMP profile write that triggers hang due to unbounded loop
A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a
drupal/cookies - SA-CONTRIB-2025-092
Ebook Store <= 5.8012 - Unauthenticated Arbitrary File Upload
WPBookit <= 1.0.6 - Unauthenticated Arbitrary File Upload via image_upload_handle Function
files-bucket-server vulnerable to Directory Traversal
private-ip vulnerable to Server-Side Request Forgery
bun vulnerable to OS Command Injection
CropRefine <= 1.2.1 - Reflected Cross-Site Scripting
Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Reflected Cross-Site Scripting
LatePoint <= 5.1.93 - Unauthenticated Local File Inclusion
Cena Store <= 2.11.26 - Unauthenticated Local File Inclusion
Jobmonster <= 4.7.8 - Reflected Cross-Site Scripting
Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Reflected Cross-Site Scripting
Youtube Vimeo Video Player and Slider WP Plugin <= 3.8 - Reflected Cross-Site Scripting
Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Reflected Cross-Site Scripting
CaptionPix <= 1.8 - Reflected Cross-Site Scripting
Security Ninja – Secure Firewall & Secure Malware Scanner - 5.201 - 5.242 - Authenticated (Administrator+) Arbitrary File Read
Multiple Plugins by itayamar - Backdoored Software
Wholesale Suite <= 2.2.4.2 - Authenticated (Shop Manager+) Privilege Escalation
Simple Business Directory Pro <= 15.5.1 - Reflected Cross-Site Scripting
Video Blogster Lite <= 1.2 - Reflected Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.