Media
CVE-2025-1979
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.855
Restablecer filtros
Alta
ghsa-3x5x-fw77-g54c
dmlc/dgl Vulnerable to Remote Code Execution by Pickle Deserialization via rpc.recv_request()
Crítica
CVE-2025-1716
picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pick
Baja
CVE-2025-24023
Flask-AppBuilder Observable Response Discrepancy
Media
CVE-2024-24778
Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know.
Sin evaluar
pysec-2025-7
Posts scraped data to IP address associated with other malware distribution attacks.
Sin evaluar
pysec-2025-6
Exfiltrates cookies to hardcoded IP address
Sin evaluar
pysec-2025-5
Exfiltrates user cookies to hardcoded server endpoint during normal operations
Sin evaluar
pysec-2025-3
When using the project to bypass Deezer API restrictions, project exfiltrates user data to a hardcoded server.
Sin evaluar
pysec-2025-4
When using the project to bypass Deezer API restrictions, project exfiltrates user data to a hardcoded server.
Crítica
CVE-2023-25574
LTI JupyterHub Authenticator does not properly validate JWT Signature
Baja
CVE-2025-26622
Vyper's sqrt doesn't define rounding behavior
Baja
CVE-2025-27105
AugAssign evaluation order causing OOB write within the object in Vyper
Baja
CVE-2025-27104
Vyper has a double eval in For List Iter
Alta
CVE-2025-1403
Malciously crafted QPY files can allows Remote Attackers to Cause Denial of Service in Qiskit
Alta
CVE-2024-8550
A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4. This vulnerability allows an attacker to read arbitrary files from the server,
Media
ghsa-432c-wxpg-m4q3
xml2rfc has file inclusion irregularities
Baja
CVE-2025-25183
vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cache
Media
CVE-2024-55456
lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell
Crítica
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Media
CVE-2025-24794
snowflake-connector-python vulnerable to insecure deserialization of the OCSP response cache
Alta
CVE-2025-24793
snowflake-connector-python vulnerable to SQL Injection in write_pandas
Media
CVE-2025-24795
snowflake-connector-python vulnerable to insecure cache files permissions
Alta
CVE-2025-24357
vllm: Malicious model to RCE by torch.load in hf_model_weights_iterator
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.