Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 647
百度站长SEO合集(支持百度/神马/Bing/头条推送) <= 2.1.4 - Missing Authorization
Headline Analyzer <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
ListingPro Lead Form <= 1.0.2 - Missing Authorization
Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system
Cargo Mediawiki Extension vulnerable to Cross-site Scripting
Rehub < 19.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Stockholm <= 9.14.1 - Authenticated (Contributor+) Local File Inclusion
Revolution < 2.5.8 - Authenticated (Subscriber+) Local File Inclusion
RTMKit <= 1.6.5 - Authenticated (Contributor+) Arbitrary File Upload
Stockholm <= 9.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Stockholm Core <= 2.4.6 - Authenticated (Contributor+) Local File Inclusion
NextMove Lite <= 2.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
DirectoryPress <= 3.6.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Eduma <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Last Modified Info <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Eduma <= 5.7.6 - Authenticated (Contributor+) Local File Inclusion
Savory <= 2.5 - Unauthenticated Local File Inclusion
Booster for WooCommerce <= 7.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Link Whisper Free <= 0.9.2 - Missing Authorization
REHub Framework < 19.9.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Stockholm Core <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
MCMS vulnerable SQL injection via the content_title parameter
ThingsBoard vulnerable to stored cross-site scripting (XSS) vulnerability in the dashboard's Image Upload Gallery feature
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.