Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 733
Restablecer filtros`qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code
JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
esphome vulnerable to stored Cross-site Scripting in edit configuration file API
ESPHome vulnerable to remote code execution via arbitrary file write
Django MarkdownX Cross-Site Scripting (XSS) vulnerability
fonttools XML External Entity Injection (XXE) Vulnerability
Fides JavaScript Injection Vulnerability in Privacy Center URL
jcvi vulnerable to Configuration Injection due to unsanitized user input
Any file can be included with the pymdown-snippets extension
git-url-parse Regular Expression Denial of Service
Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
protobuf-cpp and protobuf-python have potential Denial of Service issue
vLLM denial of service via prompt embeds on M-RoPE models
Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path
Cobbler XSS Vulnerability
In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardless o
Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in the UNSAFE_IMPORTS denylist (fickle.py). Because the
Malicious code in uprobe (PyPI)
Malicious code in ufish (PyPI)
Malicious code in synago (PyPI)
Malicious code in pantheon-toolsets (PyPI)
Malicious code in pantheon-agents (PyPI)
Malicious code in okite (PyPI)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.