Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryError Notification <= 0.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Easy Automatic Newsletter Lite <= 3.2.0 - Reflected Cross-Site Scripting
Call me Now <= 1.0.5 - Cross-Site Request Forgery
dForms <= 1.0 - Reflected Cross-Site Scripting
Marquee Style RSS News Ticker <= 3.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Eventer <= 3.9.7 - Authenticated (Subscriber+) Arbitrary File Read
Word Freshener <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Admin Options Pages <= 0.9.7 - Reflected Cross-Site Scripting
Winning Portfolio <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bookalet <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-Announcements <= 1.8 - Reflected Cross-Site Scripting
WordPress Logging Service <= 1.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Simple Custom post type custom field <= 1.0.3 - Reflected Cross-Site Scripting
Board Election <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Recip.ly Plugin <= 1.1.8 - Reflected Cross-Site Scripting
Mass Messaging in BuddyPress <= 2.2.1 - Reflected Cross-Site Scripting
Google Transliteration <= 1.7.2 - Reflected Cross-Site Scripting
Gigaom Sphinx <= 0.1 - Reflected Cross-Site Scripting
Blogger Image Import 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Web Push <= 1.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
DN Sitemap Control <= 1.0.6 - Reflected Cross-Site Scripting
VSTEMPLATE Creator <= 2.0.2 - Reflected Cross-Site Scripting
Debug Tool <= 2.2 - Missing Authorization
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.