Alta
CVE-2023-41471
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 2.003
Restablecer filtros
Alta
CVE-2025-8747
Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality
Media
CVE-2025-51481
Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the not
Alta
CVE-2025-53528
Cadwyn vulnerable to XSS on the docs page
Alta
CVE-2025-6209
LlamaIndex vulnerable to Path Traversal attack through its encode_image function
Crítica
CVE-2025-2828
A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically, langchain_community.agent_toolkits.openapi.toolkit.Requests
Crítica
CVE-2025-6278
A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.fil
Media
CVE-2025-6050
Mezzanine CMS has a Stored Cross-Site Scripting (XSS) vulnerability in the displayable_links_js function
Crítica
CVE-2025-6167
A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5. Affected is the function create_workflow of the file python_a2a/agent_flow/server/api.py. The manipulatio
Baja
CVE-2025-43866
Vantage6 Server JWT secret not cryptographically secure
Crítica
CVE-2025-1750
LlamaIndex DuckDBVectorStore vulnerable to SQL injection through ref_doc_id
Media
CVE-2025-48943
vLLM allows clients to crash the openai server with invalid regex
Media
CVE-2025-48942
vLLM DOS: Remotely kill vllm over http with invalid JSON schema
Media
CVE-2025-48887
vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`
Media
CVE-2025-48889
Gradio Allows Unauthorized File Copy via Path Manipulation
Baja
CVE-2025-46570
Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching
Media
CVE-2025-26621
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.5.2, any user with the capability manage customizations can edit webhook that wi
Alta
CVE-2025-47782
motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution
Crítica
CVE-2025-24977
OpenCTI is an open cyber threat intelligence (CTI) platform. Prior to version 6.4.11 any user with the capability `manage customizations` can execute commands on the underlying infrastructure where Op
Alta
CVE-2025-46417
Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate
Media
CVE-2025-32788
OctoPrint Authenticated Reverse Proxy Page Authentication Bypass
Media
ghsa-hf3c-wxg2-49q9
vLLM vulnerable to Denial of Service by abusing xgrammar cache
Crítica
CVE-2025-32428
TigerVNC accessible via the network and not just via a UNIX socket as intended
Media
CVE-2025-32381
xgrammar Vulnerable to Denial of Service (DoS) by abusing unbounded cache in memory
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.