Alta
CVE-2025-30355
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.358
Restablecer filtros
Alta
CVE-2025-0628
LiteLLM Has an Improper Authorization Vulnerability
Media
CVE-2025-30213
Frappe has Possibility of Remote Code Execution due to improper validation
Media
CVE-2025-30217
Frappe has possibility of SQL injection due to improper validations
Alta
CVE-2025-0330
LiteLLM Has a Leakage of Langfuse API Keys
Alta
CVE-2025-0190
Aim Excessive Data Query Operations in a Large Data Table vulnerability
Alta
CVE-2025-0189
Aim Uncontrolled Resource Consumption vulnerability
Alta
CVE-2024-9229
Quivr unauthenticated Denial of Service (DoS) via Multipart Boundary
Alta
CVE-2024-9056
BentoML Denial of Service (DoS) via Multipart Boundary
Alta
CVE-2024-9606
LiteLLM Reveals Portion of API Key via a Logging File
Media
CVE-2024-8955
composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL
Alta
CVE-2024-8984
LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
Media
CVE-2024-8556
AgentScope stored cross-site scripting (XSS) vulnerability
Alta
CVE-2024-8183
Prefect CORS (Cross-Origin Resource Sharing) misconfiguration
Alta
CVE-2024-8060
Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptions
Media
CVE-2024-7045
Open WebUI Has Improper Access Control Leading to Arbitrary Prompt Read
Alta
CVE-2024-8061
Aim allows denial of service due to no timeouts for some tracking server endpoints
Media
CVE-2024-8238
Aim Improper Access Control
Alta
CVE-2024-7768
H2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint
Media
CVE-2024-7046
Open WebUI Allows Viewing of Admin Details
Alta
CVE-2024-7053
Open WebUI Vulnerable to a Session Fixation Attack
Alta
CVE-2024-7760
Aim vulnerable to Cross-Site Request Forgery
Alta
CVE-2024-6851
Aim Path Traversal vulnerability
Media
CVE-2024-6577
TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.