Media
CVE-2019-25586
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.861
Restablecer filtros
Alta
CVE-2026-33236
NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite
Alta
CVE-2026-33231
Unauthenticated remote shutdown in nltk.app.wordnet_app
Media
CVE-2026-33230
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk
Alta
CVE-2026-33154
dynaconf Affected by Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja Resolver
Alta
CVE-2026-33053
Langflow is Missing Ownership Verification in API Key Deletion (IDOR)
Alta
CVE-2026-32874
UltraJSON has a Memory Leak parsing large integers allows DoS
Alta
CVE-2026-32875
UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop
Alta
CVE-2026-32711
pydicom has a path traversal in FileSet/DICOMDIR ReferencedFileID allows file access outside the File-set root
Alta
CVE-2026-27953
ormar Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model Constructor
Alta
ghsa-2mhw-8qcg-gr96
skia-python vendors vulnerable libfreetype because of pinned cibuildwheel version
Baja
CVE-2026-32722
Stored XSS in Memray-generated HTML reports via unescaped command-line metadata
Media
CVE-2026-8445
JustHTML has a Sanitizer Bypass (in Markdown)
Media
CVE-2026-8630
JustHTML Affected by Mutation XSS via Literal Text Serialization in Raw Text Elements (style/script)
Crítica
CVE-2026-33057
Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py
Crítica
CVE-2026-33054
Mesop has a Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion
Alta
CVE-2026-32634
Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers
Media
CVE-2026-32632
Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding
Alta
CVE-2026-32611
Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements
Alta
CVE-2026-32610
Glances's Default CORS Configuration Allows Cross-Origin Credential Theft
Alta
CVE-2026-32609
Glances has Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash and SNMP Credentials
Alta
CVE-2026-32608
Glances has a Command Injection via Process Names in Action Command Templates
Alta
CVE-2026-32596
Glances exposes the REST API without authentication
Alta
CVE-2026-30922
Denial of Service in pyasn1 via Unbounded Recursion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.