Media
CVE-2024-55456
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.355
Restablecer filtros
Crítica
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Media
CVE-2025-24794
snowflake-connector-python vulnerable to insecure deserialization of the OCSP response cache
Alta
CVE-2025-24793
snowflake-connector-python vulnerable to SQL Injection in write_pandas
Media
CVE-2025-24795
snowflake-connector-python vulnerable to insecure cache files permissions
Alta
CVE-2025-24357
vllm: Malicious model to RCE by torch.load in hf_model_weights_iterator
Alta
ghsa-gvvw-rr8m-fj76
uniapi version 1.0.7 contained an information harvesting script.
Sin evaluar
pysec-2025-2
uniapi version 1.0.7 contained an information harvesting script.
Alta
ghsa-vp47-9734-prjw
ASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape
Media
CVE-2024-57724
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.
Media
CVE-2024-57723
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.
Alta
CVE-2024-57722
lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.
Media
CVE-2024-57720
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.
Media
CVE-2024-57721
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.
Media
CVE-2024-57719
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0.
Alta
CVE-2024-53829
Cross-Site Request Forgery in CodeChecker API
Crítica
CVE-2025-22146
Sentry's improper authentication on SAML SSO process allows user impersonation
Crítica
CVE-2025-23042
Gradio Blocked Path ACL Bypass Vulnerability
Baja
CVE-2025-21607
Vyper Does Not Check the Success of Certain Precompile Calls
Crítica
CVE-2024-49375
Rasa Allows Remote Code Execution via Remote Model Loading
Media
CVE-2024-53526
Composio Command Execution vulnerability
Media
CVE-2024-45805
OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support informat
Alta
CVE-2024-21543
Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, gra
Alta
CVE-2024-45404
OpenCTI is an open-source cyber threat intelligence platform. In versions below 6.2.18, because the function to limit the rate of OTP does not exist, an attacker with valid credentials or a malicious
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.