Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 609
MP-Ukagaka <= 1.5.2 - Reflected Cross-Site Scripting
Wonka Slide <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
AdonisJS vulnerable to Denial of Service (DoS) via Unrestricted Memory Buffering in PartHandler during File Type Detection
A single post-release of dydx-v4-client contained obfuscated multi-stage loader
AdonisJS multipart body parsing has Prototype Pollution issue
Claude Code has Sandbox Escape via Persistent Configuration Injection in settings.json
Claude Code has Permission Deny Bypass Through Symbolic Links
Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions
Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection
client-certificate-auth Vulnerable to Open Redirect via Host Header Injection in HTTP-to-HTTPS redirect
Pydantic AI has Stored XSS via Path Traversal in Web UI CDN URL
Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK
SCEditor has DOM XSS via emoticon URL/HTML injection
Pydantic AI has Server-Side Request Forgery (SSRF) in URL Download Handling
OpenSTAManager has a SQL Injection in the Prima Nota module
OpenSTAManager has a SQL Injection vulnerability in the Scadenzario bulk operations module
OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service
OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module
OpenSTAManager has a SQL Injection in Scadenzario Print Template
OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)
OpenSTAManager has an OS Command Injection in P7M File Processing
Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Bold Page Builder <= 5.6.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.