Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 1 120
Wyczyść filtryDNN: Force Friend Request Acceptance
DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload
Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters
Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service
EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory
AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction
ImageMagick: META reader memory leak in the APP1JPEG input path
ImageMagick has possible memory leak in ASHLAR coder when action fails
ImageMagick has an Out-of-bounds Write via InterpretImageFilename
ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression Evaluation
Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString
Scriban has Uncontrolled Recursion in `object.to_json` Causing Unrecoverable Process Crash via StackOverflowException
Scriban: Uncontrolled Memory Allocation via string.pad_left/pad_right Allows Remote Denial of Service
Scriban: Built-in operations bypass LoopLimit and delay cancellation, enabling Denial of Service
Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuse
Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset()
Scriban has a Stack Overflow via Nested Array Initializers That Bypass the ExpressionDepthLimit Fix
Scriban Affected by Memory Exhaustion (OOM) via Unbounded String Generation (Denial of Service)
Scriban has an Infinite Recursion during Object Rendering Leads to Stack Overflow and Process Crash (Denial of Service)
Scriban has Uncontrolled Recursion in Parser Leads to Stack Overflow and Process Crash (Denial of Service)
ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash
AutoMapper Vulnerable to Denial of Service (DoS) via Uncontrolled Recursion
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.