Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 690
Rehub < 19.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Stockholm <= 9.14.1 - Authenticated (Contributor+) Local File Inclusion
Revolution < 2.5.8 - Authenticated (Subscriber+) Local File Inclusion
RTMKit <= 1.6.5 - Authenticated (Contributor+) Arbitrary File Upload
Stockholm <= 9.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Stockholm Core <= 2.4.6 - Authenticated (Contributor+) Local File Inclusion
NextMove Lite <= 2.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
DirectoryPress <= 3.6.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Eduma <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Last Modified Info <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Eduma <= 5.7.6 - Authenticated (Contributor+) Local File Inclusion
Savory <= 2.5 - Unauthenticated Local File Inclusion
Booster for WooCommerce <= 7.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Link Whisper Free <= 0.9.2 - Missing Authorization
REHub Framework < 19.9.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Stockholm Core <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
MCMS vulnerable SQL injection via the content_title parameter
ThingsBoard vulnerable to stored cross-site scripting (XSS) vulnerability in the dashboard's Image Upload Gallery feature
Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution
Kognetiks Chatbot <= 2.3.5 - Missing Authorization to Unauthenticated Limited File Uploads and Conversation Erasing
PowerBI Embed Reports <= 1.2.0 - Unauthenticated Sensitive Information Disclosure
LearnPress – WordPress LMS Plugin <= 4.2.9.3 - Missing Authorization to Unauthenticated Database Table Manipulation
Keras framework vulnerable to deserialization of untrusted data
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.