Alta
CVE-2026-97687
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 24
Restablecer filtros
Media
CVE-2026-103261
Tornado: Unbounded query-string argument count allows event-loop-stalling DoS
Media
CVE-2026-71486
vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds
Alta
CVE-2026-82397
Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop
Alta
CVE-2026-54447
garminconnect Has Insecure Permission Assignment for Garmin OAuth Token Store
Alta
CVE-2026-54071
BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py
Alta
CVE-2022-46280
Open Babel has uninitialized pointer dereference in PQS pFormat
Alta
CVE-2022-43467
Open Babel has out-of-bounds write in PQS coord_file parser
Media
CVE-2025-11000
Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)
Media
CVE-2026-31978
motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint
Alta
CVE-2026-45338
Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)
Media
CVE-2026-40214
OpenStack Cyborg's Accelerator Request (ARQ) API does not enforce project ownership at any layer
Media
CVE-2025-61912
python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination
Baja
CVE-2025-58161
MobSF Path Traversal in GET /download/<filename> using absolute filenames
Alta
CVE-2026-42304
Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains
Media
CVE-2026-27482
Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
Alta
CVE-2025-64496
Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events
Media
CVE-2023-49793
CodeChecker has a Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`
Alta
ghsa-hvh4-5qr6-3v7r
Observable Timing Discrepancy in pypqc
Crítica
CVE-2023-31543
A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server.
Media
CVE-2022-23485
Sentry vulnerable to invite code reuse via cookie manipulation
Crítica
CVE-2019-17134
OpenStack Octavia Amphora-Agent not requiring Client-Certificate
Media
CVE-2015-2674
Restkit allows man-in-the-middle attackers to spoof TLS servers by leveraging use of the ssl.wrap_socket function in Python with the default CERT_NONE value for the cert_reqs argument.
Media
CVE-2022-21690
OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the QT frontend
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.