Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 601
BTEV <= Cross-Site Request Forgery to Plugin Settings Update
GDReseller <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Woocommerce Quote Calculator <= 1.1 - Authenticated (Contributor+) SQL Injection
Website price calculator <= 4.1 - Authenticated (Contributor+) SQL Injection
MyOrderDesk <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Extender All In One For Elementor <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Golf Tracker <= 0.7 - Authenticated (Contributor+) SQL Injection
Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.14 - Authenticated (Admin+) Stored Cross-Site Scripting
Market 360 Viewer <= 1.01 - Authenticated (Contributor+) SQL Injection
Simple Goods <= 0.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
ML Responsive Audio player with playlist Shortcode <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ditty <= 3.1.46 - Authenticated (Author+) Stored Cross-Site Scripting
Social Media Share Buttons & Social Sharing Icons <= 2.9.0 - Authenticated (Admin+) Stored Cross-Site Scripting
ThinkPHP deserialization vulnerability
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
WP Simple Anchors Links <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpanchor Shortcode
Get Quote For Woocommerce – Request A Quote For Woocommerce <= 1.0.0 - Missing Authorization to Unauthenticated Quote PDF and CSV Download
WPGlobus Translate Options <= 2.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
drupal/ohdear_integration - SA-CONTRIB-2024-056
drupal/cookiebot_gtm - SA-CONTRIB-2024-055
AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload
ICG.AspNetCore.Utilities.CloudStorage's Secure Token Durations Different Than Expected
Snowflake JDBC Security Advisory
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.