Alta
CVE-2024-58340
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 704
Restablecer filtros
Media
CVE-2025-68131
CBORDecoder reuse can leak shareable values across decode calls
Media
CVE-2025-64460
Django is vulnerable to DoS via XML serializer text extraction
Media
CVE-2025-62609
MLX has Wild Pointer Dereference in load_gguf()
Baja
CVE-2025-63396
An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (Do
Alta
CVE-2025-57106
Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing
Alta
CVE-2025-11201
MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
Baja
ghsa-w476-p2h3-79g9
uv has differential in tar extraction with PAX headers
Crítica
CVE-2025-10156
Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check
Alta
CVE-2025-58756
MONAI: Unsafe torch usage may lead to arbitrary code execution
Alta
CVE-2025-58755
MONAI does not prevent path traversal, potentially leading to arbitrary file writes
Crítica
CVE-2025-58367
DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
Media
CVE-2025-71340
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode
Media
CVE-2025-71352
Picklescan has a missing detection when calling built-in python trace.Trace.runctx
Media
CVE-2025-71349
Picklescan has a missing detection when calling built-in python trace.Trace.run
Alta
CVE-2025-57760
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
Baja
ghsa-674p-xv2x-rf3g
Litestar has potential log injection in exception logging
Media
ghsa-3wwm-hjv7-23r3
Pyload log Injection via API /json/add_package in add_name parameter
Alta
CVE-2024-5187
onnx allows Arbitrary File Overwrite in download_model_with_test_data
Alta
CVE-2025-53528
Cadwyn vulnerable to XSS on the docs page
Media
CVE-2025-53865
In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates (devel and responsive).
Media
CVE-2025-48942
vLLM DOS: Remotely kill vllm over http with invalid JSON schema
Media
CVE-2025-48887
vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`
Media
CVE-2025-71379
vLLM vulnerable to Regular Expression Denial of Service
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.