Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability
TinyScientist has Path Traversal Vulnerability in PDF Review Function (CWE-22)
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass
uv allows ZIP payload obfuscation through parsing differentials
SKOPS Card.get_model happily allows arbitrary code execution
PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter
copyparty allows Regex Denial of Service (ReDoS) in the upload listing
MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion
MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion Limit
ExecuTorch integer overflow vulnerability leads to code execution
Bugsink path traversal via event_id in ingestion
copyparty has DOM-Based XSS vulnerability when displaying multimedia metadata
copyparty Reflected XSS via Filter Parameter
MS SWIFT Remote Code Execution via unsafe PyYAML deserialization
MS SWIFT WEB-UI RCE Vulnerability
OpenEXR Out-Of-Memory via Unbounded File Header Values
OpenEXR Heap-Based Buffer Overflow in Deep Scanline Parsing via Forged Unpacked Size
OpenEXR Out of Bounds Heap Read due to Bad Pointer Arithmetic in LossyDctDecoder_execute
OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode
MaterialX Null Pointer Dereference in MaterialXCore Shader Generation due to Unchecked implGraphOutput
MaterialX Null Pointer Dereference in getShaderNodes due to Unchecked nodeGraph->getOutput return
Starlette has possible denial-of-service vector when parsing large files in multipart forms
Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.