Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryMultiple Roles <= 1.3.1- Cross-Site Request Forgery Bypass
Form Manager <= 1.7.2 - Authenticated Remote Command Execution
WP Hardening – Fix Your WordPress Security <= 1.2.1 - Reflected Cross-Site Scripting
Recently <= 3.0.4 - Arbitrary File Upload to Remote Code Exectution
Comments Like Dislike <= 1.1.2 - Add Like/Dislike Bypass
Stripe Payment Plugin for WooCommerce <= 3.5.9 - Reflected Cross-Site Scripting
WP Hardening – Fix Your WordPress Security <= 1.2.1 - Reflected Cross-Site Scripting
Smart Slider 3 <= 3.5.0.8 - Authenticated Stored Cross-Site Scripting
WP Google Maps <= 8.1.11 - Authenticated Stored Cross-Site Scripting
Recently <= 3.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Jannah - Newspaper Magazine News BuddyPress AMP < 5.4.4 - Reflected Cross-Site Scripting
Comments - wpDiscuz 7.0 - 7.0.4 - Unauthenticated Arbitrary File Upload leading to Remote Code Execution
Location Manager < 2.1.0.10 - SQL Injection
Kiwi Social Sharing 2.1.0 - 2.1.2 - Arbitrary Options Change
Quiz And Survey Master <= 7.1.17 - Reflected Cross-Site Scripting
Quiz And Survey Master <= 7.1.18 - Cross-Site Scripting
Stock in & out <= 1.0.4 - SQL Injection
WordPress Payments Plugin | GetPaid <= 2.3.3 - Authenticated Stored Cross-Site Scripting
MC4WP: Mailchimp for WordPress <= 4.8.4 - Open Redirect
WordPress Bitcoin Payments – Blockonomics <= 3.2 - Reflected Cross-Site Scripting
MC4WP: Mailchimp for WordPress <= 4.8.4 - Cross-Site Request Forgery
Fancy Product Designer <= 4.6.8 - Unauthenticated Arbitrary File Upload
All 404 Redirect to Homepage & Broken images Redirection <= 2.0 - Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.