Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 498
Wyczyść filtryIcegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read
AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file
User Submitted Posts <= 20230902 - Unauthenticated Arbitrary File Upload
Royal Elementor Addons and Templates <= 1.3.78 - Unauthenticated Arbitrary File Upload
Newsletter Lite <= 4.9.2 - Authenticated (Admin+) Command Injection
Dropshipping & Affiliation with Amazon <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File Upload
OpenHook <= 4.3.0 - Authenticated (Subscriber+) Remote Code Execution via Shortcode
Welcart e-Commerce <= 2.8.21 - Authenticated(Editor+) Arbitrary File Upload
Ni Purchase Order(PO) For WooCommerce <= 1.2.1 - Authenticated (Admin+) Arbitrary File Upload
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
BEAR <= 1.1.3.3 - Missing Authorization to Product Deletion
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
WordPress Gallery Plugin – NextGEN Gallery <= 3.38 - Authenticated (Admin+) Local File Inclusion
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Profile Deletion
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
WP Job Openings <= 3.4.2 - Information Exposure
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
Staff / Employee Business Directory for Active Directory <= 1.2.3 - Authenticated (Admin+) LDAP Passback
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.