Alta
CVE-2025-66471
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 244
Restablecer filtros
Media
CVE-2025-67502
Open Redirect Vulnerability in Taguette
Media
CVE-2025-67720
Pyrofork has a Path Traversal in download_media Method
Alta
CVE-2025-62611
aiomysql allows arbitrary access to client files through vulnerability of a malicious MySQL server
Alta
CVE-2025-59425
vLLM is vulnerable to timing attack at bearer auth
Alta
CVE-2025-59042
PyInstaller has local privilege escalation vulnerability
Media
CVE-2025-53012
MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion
Alta
CVE-2025-54140
`pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write
Baja
CVE-2024-53995
GHSL-2024-288: SickChill open redirect in login
Media
CVE-2024-52294
khoj has an IDOR in subscription management allows unauthorized subscription modifications
Media
CVE-2024-43371
Potential access to sensitive URLs via CKAN extensions (SSRF)
Media
CVE-2024-41955
MobSF vulnerable to Open Redirect in Login Redirect
Alta
CVE-2024-38519
yt-dlp File system modification and RCE through improper file-extension sanitization
Media
CVE-2024-31223
Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL
Media
CVE-2024-5629
PyMongo Out-of-bounds Read in the bson module
Media
CVE-2024-52288
LibOSDP RMAC revert to the beginning of the session
Media
CVE-2024-52296
LibOSDP vulnerable to a null pointer deref in osdp_reply_name
Media
CVE-2024-24808
pyLoad open redirect vulnerability due to improper validation of the is_safe_url function
Media
CVE-2024-21645
pyload Log Injection vulnerability
Media
CVE-2017-7266
Netflix Security Monkey Open Redirect vulnerability
Media
CVE-2022-0869
Open Redirect in django-spirit
Alta
CVE-2026-57516
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
Crítica
CVE-2026-48039
Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token
Crítica
CVE-2026-38360
dash-uploader has a directory traversal vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.