Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 616
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.8 - Unauthenticated Sensitive Information Exposure
Apache Cassandra: unrestricted deserialization of JMX authentication credentials
Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions
Jenkins Zoom Plugin is Missing Password Field Masking
Spiritual Gifts Survey <= 0.9.10 - Reflected Cross-Site Scripting
Custom Block Builder – Lazy Blocks <= 3.8.2 - Reflected Cross-Site Scripting
Cross-Site Request Forgery <= 1.2.4 - Cross-Site Request Forgery
Contact Manager <= 8.6.4 - Unauthenticated Arbitrary Double File Extension Upload
Simple catalogue <= 1.0.2 - Reflected Cross-Site Scripting
WP Extra Fields <= 1.0.1 - Reflected Cross-Site Scripting
R3W InstaFeed <= 1.0 - Reflected Cross-Site Scripting
Simple Certain Time to Show Content <= 1.2.2 - Reflected Cross-Site Scripting
Essential Addons for Elementor <= 6.0.14 - Reflected Cross-Site Scripting
WordPress Activity-o-meter <= 1 - Reflected Cross-Site Scripting
pushBIZ – Push Notification <= 1.0 - Reflected Cross-Site Scripting
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Post Sync <= 1.1 - Reflected Cross-Site Scripting
NewsTicker <= 1.0 - Reflected Cross-Site Scripting
Spiritual Gifts Survey <= 0.9.10 - Reflected Cross-Site Scripting
WPMovieLibrary <= 2.1.4.8 - Reflected Cross-Site Scripting
WP Pricing Table <= 1.1 - Reflected Cross-Site Scripting
CalendApp <= 1.1 - Reflected Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.