Alta
CVE-2026-44393
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.837
Restablecer filtros
Baja
CVE-2026-50266
OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks
Baja
CVE-2026-10801
ms-swift: Image Cache Hash Collision via Missing Dimension Metadata
Crítica
CVE-2026-41283
OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed
Media
CVE-2026-48681
OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image
Baja
CVE-2026-10813
LMCache: 16-bit multimodal hash collision can poison KV cache entries
Baja
CVE-2026-10812
GPTCache: File and image cache keys collide because BufferedReader.peek() only reads the buffered prefix
Baja
CVE-2026-10766
mlrun: DataFrame hash collisions can cause dataset artifact path conflicts and silent data corruption
Media
CVE-2026-46447
OpenStack Ironic allows Boot Script Injection
Media
CVE-2026-73627
JupyterLab PluginManager lock-rule enforcement bypass
Baja
CVE-2026-73626
JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)
Media
CVE-2026-47143
Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds
Alta
CVE-2026-67324
GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pack=<value>) when enforcing its default unsafe-option gate. When an application passes atta
Sin evaluar
CVE-2023-54366
SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database ac
Media
ghsa-mfr4-mq8w-vmg6
PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs
Alta
CVE-2026-53598
Prompty: Arbitrary file read via file reference expansion
Media
ghsa-8rqh-vxpr-x77p
plone.restapi: Stored XSS by spoofing mime type
Crítica
CVE-2025-65720
GPT Researcher MCP STDIO configuration allows remote command execution
Alta
CVE-2026-105315
django-haystack: Remote Code Execution via `eval()` in Elasticsearch Result Deserialization
Alta
CVE-2026-58659
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
Alta
CVE-2026-59886
pyasn1: Uncontrolled resource consumption when converting decoded REAL values
Alta
CVE-2026-59197
Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
Alta
CVE-2026-59884
pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs
Alta
CVE-2026-59885
pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.