Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 59
Restablecer filtrosPicklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval
Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper
Picklescan missing detection when calling built-in python library function timeit.timeit()
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions
Picklescan has a missing detection when calling built-in python profile.Profile.runctx
Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER
picklescan missing detection by simple obfuscation of a `builtins.eval` call
Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection
picklescan has Arbitrary file read using `io.FileIO`
Picklescan vulnerable to Arbitrary File Writing
Picklescan Bypasses Unsafe Globals Check using pty.spawn
Picklescan has Incomplete List of Disallowed Inputs
Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length
Picklescan does not block ctypes
Picklescan is missing detection when calling built-in python ensurepip._run_pip
Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity
Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass
Picklescan is missing detection when calling built-in Python cProfile.runctx
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand
Picklescan is missing detection when calling pytorch function torch.utils._config_module.load_config
picklescan vulnerable to arbitrary file create using logging.FileHandler
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.