Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 737
UDesign Core <= 4.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kallyas <= 4.22.0 - Missing Authorization
Paid Videochat Turnkey Site <= 7.3.23 - Authenticated (Admin+) Remote Code Execution
WPCasa <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
MeetingHub <= 1.23.9 - Missing Authorization
Houzez Theme - Functionality < 4.2.0 - Unauthenticated Stored Cross-Site Scripting
Houzez Theme - Functionality <= 4.1.8 - Authenticated (Contributor+) Local File Inclusion
Houzez < 4.2.0 - Unauthenticated Local File Inclusion
TheGem Theme Elements (for WPBakery) <= 5.10.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
One Page Express Companion <= 1.6.43 - Missing Authorization
News Event <= 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
MasterStudy LMS <= 3.6.20 - Authenticated (Instructor+) Sensitive Information Exposure
Advanced Coupons for WooCommerce Coupons <= 4.6.8 - Authenticated (Shop manager+) SQL Injection
Academist < 1.3 - Unauthenticated Local File Inclusion
Houzez Theme - Functionality < 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Salient < 17.4.0 - Missing Authorization
tagDiv Composer <= 5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Sparkle FSE <= 1.0.9 - Missing Authorization
Kallyas <= 4.22.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Social proof testimonials and reviews by Repuso <= 5.29 - Missing Authorization
Blockspare <= 3.2.13.2 - Authenticated (Contributor+) Sensitive Information Exposure
MDTF <= 1.3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
e2pdf <= 1.28.09 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.