Alta
CVE-2026-54263
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.999
Restablecer filtros
Alta
CVE-2026-57516
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
Alta
CVE-2026-58168
DeepTutor missing MCP tool authorization allows non-admin users to invoke unrestricted tools
Crítica
CVE-2026-48039
Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token
Crítica
CVE-2026-44727
Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
Crítica
CVE-2026-49468
LiteLLM: Authentication Bypass via Host Header Injection
Crítica
CVE-2026-22778
vLLM has RCE In Video Processing
Crítica
CVE-2026-47393
PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default
Crítica
CVE-2026-45829
ChromaDB Python project has a pre-authentication code injection vulnerability
Crítica
CVE-2026-25879
Langroid has Prompt to SQL Injection, Leading to RCE
Crítica
CVE-2026-42601
ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView
Crítica
CVE-2026-8838
amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection
Crítica
CVE-2026-7813
pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules
Crítica
CVE-2026-0545
mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization
Crítica
CVE-2026-38360
dash-uploader has a directory traversal vulnerability
Crítica
CVE-2026-32871
FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
Crítica
CVE-2023-43654
TorchServe Server-Side Request Forgery vulnerability
Crítica
CVE-2023-6020
Ray Missing Authorization vulnerability
Crítica
CVE-2023-6021
Ray Path Traversal vulnerability
Crítica
CVE-2024-5751
litellm vulnerable to remote code execution based on using eval unsafely
Crítica
CVE-2024-34359
llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata
Crítica
CVE-2024-32651
changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution
Crítica
CVE-2024-35198
TorchServe vulnerable to bypass of allowed_urls configuration
Crítica
CVE-2024-32880
pyLoad allows upload to arbitrary folder lead to RCE
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.