Alta
ghsa-gvvw-rr8m-fj76
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.855
Restablecer filtros
Sin evaluar
pysec-2025-2
uniapi version 1.0.7 contained an information harvesting script.
Alta
ghsa-vp47-9734-prjw
ASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape
Media
CVE-2024-57724
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.
Media
CVE-2024-57723
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.
Alta
CVE-2024-57722
lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.
Media
CVE-2024-57720
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.
Media
CVE-2024-57721
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.
Media
CVE-2024-57719
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0.
Alta
CVE-2024-53829
Cross-Site Request Forgery in CodeChecker API
Crítica
CVE-2025-22146
Sentry's improper authentication on SAML SSO process allows user impersonation
Crítica
CVE-2025-23042
Gradio Blocked Path ACL Bypass Vulnerability
Media
CVE-2024-56374
Django has a potential denial-of-service vulnerability in IPv6 validation
Baja
CVE-2025-21607
Vyper Does Not Check the Success of Certain Precompile Calls
Crítica
CVE-2024-49375
Rasa Allows Remote Code Execution via Remote Model Loading
Media
CVE-2024-53526
Composio Command Execution vulnerability
Media
CVE-2024-55459
keras Path Traversal vulnerability
Media
CVE-2024-45805
OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support informat
Alta
CVE-2024-21543
Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, gra
Media
CVE-2024-55633
Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access
Alta
CVE-2024-45404
OpenCTI is an open-source cyber threat intelligence platform. In versions below 6.2.18, because the function to limit the rate of OTP does not exist, an attacker with valid credentials or a malicious
Alta
pysec-2024-154
A number of releases of ultralytics contained malicious crypto miner software.
Alta
CVE-2024-21542
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive fu
Media
CVE-2024-46455
unstructured XML External Entity (XXE)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.