Alta
CVE-2025-59425
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 240
Restablecer filtros
Alta
CVE-2025-59042
PyInstaller has local privilege escalation vulnerability
Media
CVE-2025-53012
MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion
Alta
CVE-2025-54140
`pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write
Baja
CVE-2024-53995
GHSL-2024-288: SickChill open redirect in login
Media
CVE-2024-52294
khoj has an IDOR in subscription management allows unauthorized subscription modifications
Media
CVE-2024-43371
Potential access to sensitive URLs via CKAN extensions (SSRF)
Media
CVE-2024-41955
MobSF vulnerable to Open Redirect in Login Redirect
Alta
CVE-2024-38519
yt-dlp File system modification and RCE through improper file-extension sanitization
Media
CVE-2024-31223
Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL
Media
CVE-2024-5629
PyMongo Out-of-bounds Read in the bson module
Media
CVE-2024-52288
LibOSDP RMAC revert to the beginning of the session
Media
CVE-2024-52296
LibOSDP vulnerable to a null pointer deref in osdp_reply_name
Media
CVE-2024-24808
pyLoad open redirect vulnerability due to improper validation of the is_safe_url function
Media
CVE-2024-21645
pyload Log Injection vulnerability
Media
CVE-2017-7266
Netflix Security Monkey Open Redirect vulnerability
Media
CVE-2022-0869
Open Redirect in django-spirit
Alta
CVE-2026-57516
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
Crítica
CVE-2026-48039
Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token
Crítica
CVE-2026-38360
dash-uploader has a directory traversal vulnerability
Media
ghsa-w2j7-f3c6-g8cw
Flask-Security has an Open Redirect issue
Alta
CVE-2026-54317
Home Assistant: Konnected alarm-panel switch state and zone topology disclosed to unauthenticated actors on the LAN
Media
CVE-2026-44889
WebOb: Location header normalization during redirect leads to open redirect - again
Alta
CVE-2026-42359
A bug in Apache Airflow's XCom PATCH endpoint `PATCH /api/v2/xcomEntries/{key}` allowed an authenticated UI/API user with XCom write permission on a Dag to set XCom entries under reserved key names (e
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.