Alta
CVE-2026-34591
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.319
Restablecer filtros
Alta
CVE-2026-33641
Glances Vulnerable to Command Injection via Dynamic Configuration Values
Alta
CVE-2026-33533
Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard
Crítica
CVE-2026-34953
PraisonAI Has Authentication Bypass via OAuthManager.validate_token()
Crítica
CVE-2026-34952
PraisonAI Has Missing Authentication in WebSocket Gateway
Crítica
CVE-2026-34938
PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code
Media
CVE-2026-34525
AIOHTTP accepts duplicate Host headers
Media
CVE-2026-34447
ONNX: External Data Symlink Traversal
Alta
CVE-2026-27489
onnx Vulnerable to Path Traversal via Symlink
Media
CVE-2026-34452
Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape
Alta
CVE-2026-32727
SciTokens has an Authorization Bypass via Path Traversal in Scope Validation
Alta
CVE-2026-32716
SciTokens has an Authorization Bypass via Incorrect Scope Path Prefix Checking
Crítica
ghsa-955r-262c-33jc
Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2
Alta
CVE-2026-33981
Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters
Sin evaluar
pysec-2026-3
Two telnyx versions published containing credential harvesting malware
Alta
CVE-2026-27893
vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out
Media
CVE-2026-33682
Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)
Media
CVE-2026-25645
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
Alta
CVE-2026-33497
langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
Alta
CVE-2026-33046
Indico discloses local files resulting in Remote Code Execution through LaTeX injection
Alta
CVE-2026-26209
cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads
Alta
CVE-2026-33236
NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite
Alta
CVE-2026-33231
Unauthenticated remote shutdown in nltk.app.wordnet_app
Media
CVE-2026-33230
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.