Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 2.016
Restablecer filtrosLemur: LDAP Filter Injection enables post-authentication privilege escalation
Granian vulnerable to unauthenticated DoS via WebSocket subprotocol header panic
Granian vulnerable to DoS via WSGI response header panic
PyLoad vulnerable to unauthenticated traceback disclosure via global exception handler in WebUI
vLLM Vulnerable to Remote DoS via Special-Token Placeholders
ciguard: discover_pipeline_files follows symlinks out of scan root
ciguard: SCA HTTP client reads response body without size cap
Ethyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection
wireshark-mcp vulnerable to arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configured
PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope
PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image
PPTAgent: Arbitrary File Write via `save_generated_slides`
requests-hardened is Vulnerable to Server-Side Request Forgery
Microdot has HTTP response splitting in Response.set_cookie()
Langchain-Chatchat Uses Insufficiently Random Values
Langchain-Chatchat Uses a Broken or Risky Cryptographic Algorithm
Langchain-Chatchat has a Race Condition in its OpenAI-Compatible File Upload API
mcpo-simple-server has a Path Traversal issue
CKAN has CSRF exemption primed by anonymous requests
mcp-url-downloader has a Server-Side Request Forgery issue
mkdocs-mcp-plugin has a Path Traversal issue
CKAN has no certificate validation on STMP connection
auto-favicon has a Server-Side Request Forgery issue
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.