Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 602
Click to Call or Chat Buttons <= 1.4.0 - Authenticated(Admin+) Stored Cross-Site Scripting
Feed Changer <= 0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Archivist – Custom Archive Templates <= 1.7.4 - Authenticated(Admin+) Stored Cross-Site Scripting
WordPress Email Marketing Plugin – WP Email Capture <= 3.9.3 - Cross Site Request Forgery
Quick Contact Form <= 8.0.3.1 - Authenticated (Admin+) Stored Cross Site Scripting
Podlove Subscribe button <= 1.3.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Eyes Only: User Access Shortcode <= 1.8.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Easy Panorama <= 1.1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Get URL Cron <= 1.4.7 - Missing Authorization via geturlcron_action_handle
Sticky Ad Bar <= 1.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
vSlider Multi Image Slider <= 4.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion
Olevmedia Shortcodes <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fontiran <= 2.1 - Missing Authorization via fi_add_rule and fi_delete_webfont_php
Archivist – Custom Archive Templates <= 1.7.4 - Cross-Site Request Forgery
Zeno Font Resizer <= 1.7.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
VikBooking Hotel Booking Engine & PMS <= 1.6.1 - Cross-Site Request Forgery in listenTosFieldSavingTask function
WP BaiDu Submit <= 1.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Campaign URL Builder <= 1.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting via Create Link
VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in save_admin_widgets function
.NET Remote Code Execution Vulnerability
Denial of service due to unlimited number of parts
Cross site scripting Vulnerability in backstage Software Catalog
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.