Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 749
bun vulnerable to OS Command Injection
CropRefine <= 1.2.1 - Reflected Cross-Site Scripting
Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Reflected Cross-Site Scripting
LatePoint <= 5.1.93 - Unauthenticated Local File Inclusion
Cena Store <= 2.11.26 - Unauthenticated Local File Inclusion
Jobmonster <= 4.7.8 - Reflected Cross-Site Scripting
Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Reflected Cross-Site Scripting
Youtube Vimeo Video Player and Slider WP Plugin <= 3.8 - Reflected Cross-Site Scripting
Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Reflected Cross-Site Scripting
CaptionPix <= 1.8 - Reflected Cross-Site Scripting
Security Ninja – Secure Firewall & Secure Malware Scanner - 5.201 - 5.242 - Authenticated (Administrator+) Arbitrary File Read
Multiple Plugins by itayamar - Backdoored Software
Wholesale Suite <= 2.2.4.2 - Authenticated (Shop Manager+) Privilege Escalation
Simple Business Directory Pro <= 15.5.1 - Reflected Cross-Site Scripting
Video Blogster Lite <= 1.2 - Reflected Cross-Site Scripting
WPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder Elements
VidMov <= 1.9.4 - Unauthenticated Local File Inclusion
Support Board <= 3.8.0 - Reflected Cross-Site Scripting
rsdirectory
Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the not
onnx allows Arbitrary File Overwrite in download_model_with_test_data
Featured Image Plus – Quick & Bulk Edit with Unsplash <= 1.6.6 - Authenticated (Admin+) Server-Side Request Forgery
Social Streams <= 1.2.1 - Authenticated (Subscriber+) Privilege Escalation
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.