Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 593
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Welcome Popup Update
Wordpress Simple Share Plugin <= 0.5.3 - Authenticated (Admin+) Stored Cross-Site Scripting
TrueBooker <= 1.0.2 - Cross-Site Request Forgery to Settings Update
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to SMTP Settings Update
Opti Marketing <= 2.0.9 - Unauthenticated SQL Injection
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Exit Popup Update
WP MultiTasking <= 0.1.12 - Cross-Site Request Forgery to Settings Update
DL Robots.txt <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
TrueBooker <= 1.0.3 - Unauthenticated SQL Injection
DL Verification <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
WP MultiTasking <= 0.1.12 - Reflected Cross-Site Scripting
CometVisu Backend for openHAB has a path traversal vulnerability
CometVisu Backend for openHAB affected by RCE through path traversal
CometVisu Backend for openHAB has a sensitive information disclosure vulnerability
CometVisu Backend for openHAB affected by SSRF/XSS
Opal Membership <= 1.2.4 - Authenticated (Subscriber+) Information Disclosure
Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover
Opal Membership <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting
BetterDocs <= 3.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
BSK Forms Blacklist <= 3.8 - Reflected Cross-Site Scripting
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text
Shared Files <= 1.7.28 - Unauthenticated Sensitive Information Exposure
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.