Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 220
Restablecer filtrospillow-heif: Integer Overflow in Encode Path Buffer Validation Leads to Heap Out-of-Bounds Read
Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
CBORDecoder reuse can leak shareable values across decode calls
MLX has Wild Pointer Dereference in load_gguf()
MLX has heap-buffer-overflow in load()
vLLM has a Weakness in MultiModalHasher Image Hashing Implementation
Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate
ray vulnerable to Insertion of Sensitive Information into Log File
AugAssign evaluation order causing OOB write within the object in Vyper
Vyper has a double eval in For List Iter
lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.
Vyper Does Not Check the Success of Certain Precompile Calls
Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was susceptible to double-unregistration bugs due to a race
A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use a
TensorFlow has segfault in array_ops.upper_bound
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
vyper performs double eval of the slice start/length args in certain cases
RPyC's missing security check results in code execution when using numpy.array on the server-side.
eth-abi is vulnerable to recursive DoS
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index provided has for side effect to update `b`, the byte a
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an excessively large value is specified as the starting index for an array in `_abi_decode`, it can cause the read posi
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.