Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 602
JS Help Desk <= 2.7.1 - Missing Authorization to Plugin Settings Update
ChatBot <= 4.3.0 - Authenticated (Admin+) Cross-Site Scripting
Simple Newsletter Plugin – Noptin <= 1.10.3 - Unauthenticated CSV Injection
JS Help Desk <= 2.7.1 - Missing Authorization
JS Help Desk <= 2.7.1 - Unauthenticated Arbitrary File Upload
ContentStudio <= 1.2.5 - Information Exposure
VikBooking Hotel Booking Engine & PMS <= 1.5.11 - Authenticated (Admin+) Stored Cross-Site Scripting
bbPress Voting <= 2.1.11.0 - Authenticated (Admin+) Stored Cross-Site Scripting
TinyMCE Custom Styles <= 1.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Table Manager <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WooCommerce PDF Invoices & Packing Slips <= 3.2.5 - Cross Site Request Forgery
Limit Login Attempts Plus <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.48 - Authenticated (Admin+) Cross Site Scripting (XSS)
Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration <= 1.62.0 - Authenticated (Admin+) Cross Site Scripting
Simple Photo Gallery <= 1.8.1 - Authenticated (Admin+) SQL Injection
Ecwid Ecommerce Shopping Cart <= 6.11.3 - Cross Site Request Forgery
WPComplete <= 2.9.4 - Reflected Cross-Site Scripting
Organization chart <= 1.4.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Survey Maker <= 3.2.0 - Missing Authorization
ChatBot <= 4.2.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting and Settings Reset
Cross-site Scripting in yapi-vendor
phpmyadmin contains SQL Injection vulnerability
Directory Traversal vulnerability in serve-lite
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.