Alta
CVE-2025-62727
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 741
Restablecer filtros
Media
CVE-2025-62800
FastMCP vulnerable to reflected XSS in client's callback page
Alta
CVE-2025-61773
pyLoad CNL and captcha handlers allow Code Injection via unsanitized parameters
Alta
CVE-2025-62172
Home Assistant has Stored XSS vulnerability in Energy dashboard from Energy Entity Name
Alta
CVE-2025-61920
Authlib is vulnerable to Denial of Service via Oversized JOSE Segments
Media
CVE-2025-62706
Authlib : JWE zip=DEF decompression bomb enables DoS
Media
CVE-2025-61765
python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments
Media
CVE-2025-53354
NiceGUI has a Reflected XSS
Alta
CVE-2025-61784
LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities
Alta
CVE-2025-59420
Authlib: JWS/JWT accepts unknown crit headers (RFC violation → possible authz bypass)
Alta
CVE-2025-6984
Langchain Community Vulnerable to XML External Entity (XXE) Attacks
Alta
CVE-2025-71344
Picklescan is missing detection when calling built-in python ensurepip._run_pip
Alta
CVE-2025-71361
Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip
Alta
CVE-2025-71358
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity
Alta
CVE-2025-71354
Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem
Media
CVE-2025-58162
MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
Media
CVE-2025-55673
Apache Superset data query improperly discloses database schema information to low-privileged guest user
Alta
CVE-2025-71325
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass
Media
CVE-2025-54368
uv allows ZIP payload obfuscation through parsing differentials
Baja
CVE-2025-50460
MS SWIFT Remote Code Execution via unsafe PyYAML deserialization
Alta
CVE-2025-54412
Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution
Alta
CVE-2025-54413
Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time
Alta
CVE-2025-54140
`pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write
Alta
CVE-2025-54365
FastAPI Guard has a regex bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.