Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 230
Restablecer filtrosvLLM: Quadratic Time Complexity in Input Token Processing leads to denial of service
rockhopper Buffer Overflow vulnerability
sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data
ansys-geometry-core OS Command Injection vulnerability
LibOSDP vulnerable to a null pointer deref in osdp_reply_name
TensorFlow has Null Pointer Error in TensorArrayConcatV2
TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
TensorFlow vulnerable to integer overflow in EditDistance
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView
Ray OS Command Injection vulnerability
Ray has arbitrary code execution via jobs submission API
Ray Missing Authorization vulnerability
Ray Path Traversal vulnerability
Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack
Ray's New Token Authentication is Disabled By Default
h11 accepts some malformed Chunked-Encoding bodies
Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering
libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB
libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface clai
Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains
oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)
Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.