Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 220
Restablecer filtrosDenial of service via non-terminating SYLT frame parsing loop in tinytag
OpenEXR's CompositeDeepScanLine integer-overflow leads to heap OOB write
Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading
TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
mcp-atlassian: Arbitrary server-side file read via attachment upload
Out-of-bounds Read in OpenCV
Integer Overflow or Wraparound in OpenCV.
Trapster Community: Unauthenticated malformed DNS compression pointers crash per-packet honeypot handler
Malicious code in ray-mcp-server (PyPI)
Fides has a Lack of Brute-Force Protections on Authentication Endpoints
OpenEXR Out-Of-Memory via Unbounded File Header Values
vLLM Tool Schema allows DoS via Malformed pattern and type Fields
Vyper's `slice()` may elide side-effects when output length is 0
docarray prototype pollution
vLLM: Quadratic Time Complexity in Input Token Processing leads to denial of service
rockhopper Buffer Overflow vulnerability
sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data
ansys-geometry-core OS Command Injection vulnerability
LibOSDP vulnerable to a null pointer deref in osdp_reply_name
TensorFlow has Null Pointer Error in TensorArrayConcatV2
TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
TensorFlow vulnerable to integer overflow in EditDistance
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.