Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 686
Jenkins Aqua Security Serverless Scanner Plugin showed plain text password in job configuration form fields
Jenkins Beaker Builder Plugin has Insufficiently Protected Credentials
Jenkins Dashboard View Plugin vulnerable to Cross-site Scripting
Jenkins Build Environment Plugin vulnerable to Cross-site Scripting
Sandbox bypass vulnerability in Script Security Plugin
Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin
An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdb_env_open2 if mdb_env_read_header obtains a zero value for a certain size field. NOTE: this outcome occurs w
An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs wh
An issue was discovered in py-lmdb 0.97. For certain values of mp_flags, mdb_page_touch does not properly set up mc->mc_pg[mc->top], leading to an invalid write operation. NOTE: this outcome occurs wh
An issue was discovered in py-lmdb 0.97. mdb_node_del does not validate a memmove in the case of an unexpected node->mn_hi, leading to an invalid write operation. NOTE: this outcome occurs when access
Cross-site Scripting in LimeSurvey
Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title
Cross-site Scripting in LimeSurvey
LibreNMS Information Disclosure
Total.js CMS RCE Vulnerability
Total.js CMS Unauthorized Access
Total.js CMS Path Traversal
Mule modules contain Directory Traversal
OpenStack os-vif Ageing time of 0 disables linuxbridge MAC learning
Jenkins Splunk Plugin Sandbox Bypass
Improper Neutralization of Input During Web Page Generation in Jenkins
Cross-Site Request Forgery in Jenkins
Jenkins IBM AppScan Plugin showed plain text password in job configuration form fields
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.