Baja
CVE-2025-44021
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.319
Restablecer filtros
Media
CVE-2025-24887
OpenCTI is an open-source cyber threat intelligence platform. In versions starting from 6.4.8 to before 6.4.10, the allow/deny lists can be bypassed, allowing a user to change attributes that are inte
Alta
ghsa-22fp-mf44-f2mq
youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization
Crítica
CVE-2025-32428
TigerVNC accessible via the network and not just via a UNIX socket as intended
Crítica
CVE-2025-32013
LNbits Lightning Network Payment System Vulnerable to Server-Side Request Forgery via LNURL Authentication Callback
Media
CVE-2025-31116
Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding
Alta
CVE-2024-8616
H2O Vulnerable to Arbitrary File Overwrite
Crítica
CVE-2024-7776
A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal att
Alta
CVE-2024-6854
H2O Vulnerable to Arbitrary File Overwrite via File Export
Media
CVE-2024-6863
H2O Vulnerable to Execution of Arbitrary Files
Crítica
CVE-2024-6829
Aim External Control of File Name or Path vulnerability
Alta
ghsa-w466-2wfc-8g58
Open WebUI has vulnerable dependency on starlette via fastapi
Crítica
CVE-2024-10831
DB-GPT Absolute Path Traversal vulnerability
Crítica
CVE-2024-10833
DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
Media
CVE-2025-0188
A Server-Side Request Forgery (SSRF) vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows an attacker to construct a response link by saving the respon
Media
CVE-2024-9159
An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availa
Media
CVE-2025-29779
Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`
Alta
CVE-2025-1550
Arbitrary Code Execution via Crafted Keras Config for Model Loading
Alta
ghsa-3x5x-fw77-g54c
dmlc/dgl Vulnerable to Remote Code Execution by Pickle Deserialization via rpc.recv_request()
Baja
CVE-2025-27105
AugAssign evaluation order causing OOB write within the object in Vyper
Baja
CVE-2025-27104
Vyper has a double eval in For List Iter
Alta
CVE-2025-1403
Malciously crafted QPY files can allows Remote Attackers to Cause Denial of Service in Qiskit
Crítica
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Alta
ghsa-vp47-9734-prjw
ASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.