Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 2.015
Restablecer filtrosWeblate exposes personal IP address via e-mail
LLaMA-Factory allows Code Injection through improper vhead_file safeguards
Nautobot may allows uploaded media files to be accessible without authentication
OctoPrint Vulnerable to Denial of Service through malformed HTTP request in OctoPrint
vLLM Tool Schema allows DoS via Malformed pattern and type Fields
Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration
Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack
Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks
AWS SAM CLI Path Traversal allows file copy to build container
AWS SAM CLI Path Traversal allows file copy to local cache
jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"
Litestar and Starlite vulnerable to Path Traversal
Synapse vulnerable to federation denial of service via malformed events
LiteLLM Has a Leakage of Langfuse API Keys
Aim Excessive Data Query Operations in a Large Data Table vulnerability
Aim Uncontrolled Resource Consumption vulnerability
Quivr unauthenticated Denial of Service (DoS) via Multipart Boundary
BentoML Denial of Service (DoS) via Multipart Boundary
composio Server-Side Request Forgery (SSRF) vulnerability
composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL
LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
Aim allows denial of service due to no timeouts for some tracking server endpoints
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.