Crítica
CVE-2025-30405
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.855
Restablecer filtros
Crítica
CVE-2025-54950
ExecuTorch out-of-bounds access vulnerability
Crítica
CVE-2025-30404
ExecuTorch integer overflow vulnerability
Crítica
CVE-2025-54949
ExecuTorch heap buffer overflow vulnerability
Crítica
CVE-2025-54951
ExecuTorch vulnerable to Heap-based Buffer Overflow
Alta
CVE-2025-45768
pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may
Crítica
pysec-2025-72
num2words subjected to phishing attack, two versions published containing malware
Media
ghsa-r54c-2xmf-2cf3
MS SWIFT Deserialization RCE Vulnerability
Media
ghsa-3wwm-hjv7-23r3
Pyload log Injection via API /json/add_package in add_name parameter
Alta
CVE-2025-52490
An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.
Crítica
CVE-2025-5120
smolagents has Sandbox Escape Vulnerability in the local_python_executor.py Module
Alta
CVE-2025-8183
NULL Pointer Dereference in µD3TN via non-singleton destination Endpoint Identifier allows remote attacker to reliably cause DoS
Crítica
CVE-2025-54379
LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability
Media
CVE-2025-50481
A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a
Media
CVE-2025-51481
Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the not
Alta
CVE-2024-5187
onnx allows Arbitrary File Overwrite in download_model_with_test_data
Alta
CVE-2025-53528
Cadwyn vulnerable to XSS on the docs page
Media
CVE-2025-7885
A vulnerability, which was classified as problematic, has been found in Huashengdun WebSSH up to 1.6.2. Affected by this issue is some unknown functionality of the component Login Page. The manipulati
Media
CVE-2025-46732
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.6.6, an IDOR vulnerability in the GrapQL `NotificationLineNotificationMarkReadMu
Media
CVE-2025-53865
In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates (devel and responsive).
Alta
CVE-2025-30402
ExecuTorch vulnerable to Heap-based Buffer Overflow attack
Alta
CVE-2025-6209
LlamaIndex vulnerable to Path Traversal attack through its encode_image function
Media
CVE-2025-5472
LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing
Media
CVE-2025-6210
LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.