Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 27
Wyczyść filtrywpDiscuz <= 7.6.59 - Unauthenticated Stored Cross-Site Scripting
Comments <= 7.6.56 - Unauthenticated Stored Cross-Site Scripting via 'Website' Field
Comments – wpDiscuz <= 7.6.46 - Authenticated (Admin+) Stored Cross-Site Scripting
wpDiscuz <= 7.6.42 - Unauthenticated Insecure Direct Object Reference
Comments – wpDiscuz <= 7.6.39 - Unauthenticated Authentication Bypass Through Account Takeover
wpDiscuz <= 7.6.33 - Missing Authorization
Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider
Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection
Comments – wpDiscuz <= 7.6.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
wpDiscuz <= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text
wpDiscuz <= 7.6.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
wpDiscuz <= 7.6.11 - Unauthenticated Stored Cross-Site Scripting via Comment Uploaded Image Filename
wpDiscuz <= 7.6.10 - Unauthenticated Content Injection
wpDiscuz <= 7.6.3 - Authenticated(Author+) Insecure Direct Object Reference
wpDiscuz <= 7.6.10 - Insufficient Authorization to Comment Submission on Deleted Posts
wpDiscuz <= 7.6.3 - Missing Authorization via AJAX actions
wpDiscuz <= 7.6.5 - Unauthenticated SQL Injection
wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/Decrease
wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Post Rating Increase/Decrease
Comments – wpDiscuz <= 7.4.2 - Insecure Direct Object References
Comments - wpDiscuz <= 7.3.11 Sensitive Information Disclosure
Comments - wpDiscuz <= 7.3.3 - Arbitrary Comment Addition/Edition/Deletion by Cross-Site Request Forgery
Comments - wpDiscuz <= 7.3.0 - Authenticated Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.