Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 609
user files <= 2.4.2 - Unauthenticated Arbitrary File Upload
PDF.js Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Smart Tooltip <= 1.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Unique UX <= 0.9.2 - Reflected Cross-Site Scripting
Plestar Directory Listing <= 1.0 - Reflected Cross-Site Scripting
Realty Workstation <= 1.0.45 - Missing Authorization
MeinTurnierplan.de Widget Viewer <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ni WooCommerce Sales Report Email <= 3.1.4 - Reflected Cross-Site Scripting
Post Meta <= 1.0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
My Favorite Car <= 1.0 - Reflected Cross-Site Scripting
Notifikácie.sk <= 1.0 - Reflected Cross-Site Scripting
GravatarLocalCache <= 1.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WordPress Additional Logins <= 1.0.0 - Reflected Cross-Site Scripting
CubePM <= 1.0 - Reflected Cross-Site Scripting
Rio Photo Gallery <= 0.1 - Reflected Cross-Site Scripting
Metaphor Widgets <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Google Org Chart <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Better Protected Pages <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Bulk Categories Assign <= 1.0 - Reflected Cross-Site Scripting
RS Survey <= 1.0 - Reflected Cross-Site Scripting
Rezdy Reloaded <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
Easy EU Cookie law <= 1.3.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
root Cookie <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.