Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 334
Wyczyść filtryLangroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read
Kiwi TCMS's /init-db/ page renders and responds to requests after first use
Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload
Open Babel has out-of-bounds write in ORCA nAtoms parser
Open Babel has out-of-bounds write in MOL2 attribute/value parser
Open Babel has uninitialized pointer dereference in GRO residue parser
Open Babel has uninitialized pointer dereference in MSI atom parser
Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)
Open Babel has out-of-bounds write in Gaussian translationVectors[]
mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete
Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT)
Open Babel has uninitialized pointer dereference in PQS pFormat
Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant)
Open Babel has out-of-bounds write in MSI translationVectors[]
Open Babel has out-of-bounds write in PQS coord_file parser
Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`
Open Babel has out-of-bounds write in Gaussian coords_type orientation parser
Open Babel has out-of-bounds write in CSR PadString (title field)
Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence
Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule
Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)
Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines
mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.