Alta
CVE-2025-71320
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 733
Restablecer filtros
Alta
CVE-2025-71323
Picklescan does not block ctypes
Alta
CVE-2025-67729
lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()
Baja
CVE-2025-68142
PyMdown Extensions has a ReDOS bug in its Figure Capture extension
Media
CVE-2025-34469
Cowrie has a SSRF vulnerability in wget/curl emulation enabling DDoS amplification
Media
CVE-2025-66470
NiceGUI Stored/Reflected XSS in ui.interactive_image via unsanitized SVG content
Baja
CVE-2025-66040
Spotipy has a XSS vulnerability in its OAuth callback server
Alta
CVE-2025-12060
Keras Directory Traversal Vulnerability
Baja
CVE-2025-65858
Calibre-Web Has a Stored Cross-Site Scripting (XSS) Vulnerability via the 'username' Field During User Creation
Media
CVE-2025-66034
fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib
Alta
CVE-2025-62164
vLLM deserialization vulnerability leading to DoS and potential RCE
Alta
CVE-2025-64512
Arbitrary Code Execution in pdfminer.six via Crafted PDF Input
Alta
CVE-2025-70559
Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc
Alta
CVE-2025-62703
Fugue is Vulnerable to Remote Code Execution by Pickle Deserialization via FlaskRPCServer
Alta
CVE-2025-60787
motionEye vulnerable to RCE via unsanitized motion config parameter
Alta
CVE-2025-64439
LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer
Alta
CVE-2025-62727
Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``
Media
CVE-2025-62800
FastMCP vulnerable to reflected XSS in client's callback page
Alta
CVE-2025-61773
pyLoad CNL and captcha handlers allow Code Injection via unsanitized parameters
Alta
CVE-2025-62172
Home Assistant has Stored XSS vulnerability in Energy dashboard from Energy Entity Name
Alta
CVE-2025-61920
Authlib is vulnerable to Denial of Service via Oversized JOSE Segments
Media
CVE-2025-62706
Authlib : JWE zip=DEF decompression bomb enables DoS
Media
CVE-2025-61765
python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments
Media
CVE-2025-53354
NiceGUI has a Reflected XSS
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.