Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 602
Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.1.7 - Cross-Site Scripting
WP Map Block – Gutenberg Map Block for Google Map and OpenStreet Map <= 1.2.2 - Stored Cross-Site Scripting
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 6.61 - Reflected Cross-Site Scripting
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection < 6.6.7 - Reflected Cross-Site Scripting
Nested Pages <= 3.1.15 - Open Redirect
PHPRelativePath Library - Various Plugins (Various Versions) - Reflected Cross-Site Scripting
MX Time Zone Clocks <= 3.4 - Contributor+ Cross-Site Scripting
Booster for WooCommerce <= 5.4.3 - Authentication Bypass
Recipe Card Blocks by WPZOOM <= 2.8.0 - Reflected Cross-Site Scripting
SMTP Mail <= 1.2.1 - SQL Injection
SMTP Mail <= 1.1.14 - Reflected Cross-Site Scripting
Podlove Podcast Publisher <= 3.5.5 - Unauthenticated SQL Injection
WooCommerce Affiliate Plugin – Coupon Affiliates <= 4.11.0.1 - Reflected Cross-Site Scripting
TextMe SMS <= 1.8.8 - Authenticated Stored Cross-Site Scripting
Contact List – Easy Business Directory, Staff Directory and Address Book Plugin <= 2.9.41 - Reflected Cross-Site Scripting
Contact Form Entries – Contact Form 7, WPforms and more <= 1.2.0 - Reflected Cross-Site Scripting
Recipe Card Blocks by WPZOOM <= 2.8.2 - Authenticated Stored Cross-Site Scripting
Live Scores for SportsPress <= 1.9.0 - Reflected Cross-Site Scripting
Live Scores for SportsPress <= 1.9.0 - Authenticated (Admin+) Local File Inclusion
Improper neutralization of SQL parameter in SmartBlog module from SmartDataSoft for PrestaShop
Cross-Site Scripting via SVG media files
Authenticated server-side request forgery in file upload via URL.
Uncaught Exception in jsoup
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.