Alta
CVE-2025-2099
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.358
Restablecer filtros
Alta
CVE-2025-47273
setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write
Alta
CVE-2025-47783
label-studio vulnerable to Cross-Site Scripting (Reflected) via the label_config parameter.
Alta
CVE-2025-47782
motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution
Media
CVE-2025-32873
Django has a denial-of-service possibility in strip_tags()
Crítica
CVE-2025-47241
Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL
Crítica
CVE-2025-24977
OpenCTI is an open cyber threat intelligence (CTI) platform. Prior to version 6.4.11 any user with the capability `manage customizations` can execute commands on the underlying infrastructure where Op
Crítica
CVE-2025-32444
vLLM Vulnerable to Remote Code Execution via Mooncake Integration
Alta
CVE-2025-46417
Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate
Media
CVE-2025-32788
OctoPrint Authenticated Reverse Proxy Page Authentication Bypass
Alta
ghsa-22fp-mf44-f2mq
youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization
Media
ghsa-hf3c-wxg2-49q9
vLLM vulnerable to Denial of Service by abusing xgrammar cache
Alta
CVE-2025-32021
Weblate is a web based localization tool. Prior to version 5.11, when creating a new component from an existing component that has a source code repository URL specified in settings, this URL is inclu
Media
CVE-2025-32381
xgrammar Vulnerable to Denial of Service (DoS) by abusing unbounded cache in memory
Crítica
CVE-2025-32375
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting
Media
CVE-2025-71355
Picklescan failed to detect to some unsafe global function in Numpy library
Crítica
CVE-2025-32013
LNbits Lightning Network Payment System Vulnerable to Server-Side Request Forgery via LNURL Authentication Callback
Crítica
CVE-2025-2945
pgAdmin 4 Vulnerable to Remote Code Execution
Media
CVE-2025-27556
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.Lo
Media
CVE-2025-31116
Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding
Baja
ghsa-785h-76cm-cpmf
Django TomSelect incomplete escaping of dangerous characters in widget attributes
Media
CVE-2024-55029
NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.
Alta
CVE-2025-2757
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AI_MD5_PARSE_STRING_IN_QUOTATION of the file code/AssetLib/MD5/MD5Pa
Crítica
CVE-2024-12029
A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3.1 through 5.4.2 via the /api/v2/models/install API. The vulnerability arises from unsafe deserialization of model files
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.