Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 609
My auctions allegro <= 3.6.18 - Reflected Cross-Site Scripting
Contact Form With Shortcode <= 4.2.5 - Reflected Cross-Site Scripting
FAT Event Lite <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Realtyna Provisioning <= 1.2.2 - Reflected Cross-Site Scripting
Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message
Silverstripe Framework has a XSS in form messages
Silverstripe Framework has a XSS via insert media remote file oembed
Lodestar snappy checksum issue
Lodestar snappy decompression issue
PDF for WPForms + Drag and Drop Template Builder <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yeepdf_dotab Shortcode
Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation
Social proof testimonials and reviews by Repuso <= 5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Piotnet Addons For Elementor <= 2.4.32 - Authenticated (Contributor+) Post Disclosure
Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability
Umbraco Forms's Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length
Git Credential Manager carriage-return character in remote URL allows malicious repository to leak credentials
Gradio Blocked Path ACL Bypass Vulnerability
Django has a potential denial-of-service vulnerability in IPv6 validation
Event Registration Calendar By vcita <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mediawiki - DataTransfer Extension Cross-Site Request Forgery (CSRF) and Cross-site Scripting (XSS)
Apache Linkis Metadata Query Service JDBC: JDBC Datasource Module with Mysql has file read vulnerability
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.