Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 685
Restablecer filtrosTransformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking
Transformers vulnerable to ReDoS attack through its get_imports() function
Transformers vulnerable to ReDoS attack through its SETTING_RE variable
OctoPrint vulnerable to possible file extraction via upload endpoints
Vyper's `concat()` builtin may elide side-effects for zero-length arguments
Vyper's `slice()` may elide side-effects when output length is 0
Data exposure via ZeroMQ on multi-node vLLM deployment
Transformers Regular Expression Denial of Service (ReDoS) vulnerability
Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload
Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack
LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py
Aim Excessive Data Query Operations in a Large Data Table vulnerability
Aim Uncontrolled Resource Consumption vulnerability
Aim allows denial of service due to no timeouts for some tracking server endpoints
Aim vulnerable to Cross-Site Request Forgery
Aim Path Traversal vulnerability
Transformers Regular Expression Denial of Service (ReDoS) vulnerability
Kedro allows Remote Code Execution by Pulling Micro Packages
Aim Uncontrolled Resource Consumption vulnerability
Aim vulnerable to Synchronous Access of Remote Resource without Timeout
GluonCV Arbitrary File Write via TarSlip
Aim Vulnerable to Denial of Service (DoS)
Label Studio has a Path Traversal Vulnerability via image Field
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.