Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 602
LaunchPage.app Importer <= 1.1 - Unauthenticated SQL Injection
Critical Site Intel <= 1.0 - Unauthenticated SQL Injection
Bootstrap Buttons <= 1.2 - Reflected Cross-Site Scripting
WordPress CRM Plugin – WP-CRM System <= 3.2.9.1 - Missing Authorization
Advanced Data Table For Elementor <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
eTemplates <= 0.2.1 - Unauthenticated SQL Injection
Job Board Manager <= 2.1.60 - Missing Authorization
Leader <= 2.6.1 - Missing Authorization
Contact Form, Survey & Form Builder – MightyForms <= 1.3.9 - Missing Authorization
TSB Occasion Editor <= 1.2.1 - Authenticated (Subscriber+) SQL Injection
PowerFormBuilder <= 1.0.6 - Authenticated (Subscriber+) SQL Injection
Share Buttons – Social Media <= 1.0.2 - Unauthenticated SQL Injection
Spreadr Woocommerce <= 1.0.4 - Missing Authorization to Arbitrary Content Deletion
Torod – The smart shipping and delivery portal for e-shops and retailers <= 1.7 - Missing Authorization to Unauthenticated Plugin Settings Update
Responsive Google Maps | by imbaa <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Nabz Image Gallery <= v1.00 - Unauthenticated SQL Injection
Mollie for Contact Form 7 <= 5.0.0 - Authenticated (Administrator+) SQL Injection
Service <= 1.0.4 - Authenticated (Subscriber+) SQL Injection
Utech World Time <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Spreadr Woocommerce <= 1.0.4 - Missing Authorization
Dr Affiliate <= 1.2.3 - Authenticated (Subscriber+) SQL Injection
hmd <= 2.0 - Reflected Cross-Site Scripting
Posti Shipping <= 3.10.3 - Cross-Site Request Forgery
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.