Alta
CVE-2022-43467
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Alta
CVE-2026-49986
Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`
Alta
CVE-2022-37331
Open Babel has out-of-bounds write in Gaussian coords_type orientation parser
Alta
CVE-2022-41793
Open Babel has out-of-bounds write in CSR PadString (title field)
Baja
CVE-2026-3408
Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence
Baja
CVE-2025-10994
Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule
Media
CVE-2025-11000
Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)
Baja
CVE-2025-10998
Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines
Alta
CVE-2026-49291
mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call
Baja
CVE-2025-10995
Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow
Baja
CVE-2026-2704
Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString
Media
CVE-2025-10999
Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt
Baja
CVE-2026-2705
Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge
Alta
CVE-2025-10997
Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies
Alta
CVE-2025-10996
Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles
Alta
CVE-2026-48804
python-socketio: Binary attachment accumulation can cause denial of service
Alta
CVE-2026-48809
python-engineio has possible denial of service due to maximum payload size sometimes not being enforced
Alta
CVE-2026-48802
python-engineio has unbound thread allocation that can cause denial of service
Media
CVE-2026-55163
Lemur Privilege Escalation: Non-admin role members can rewrite role membership via PUT /api/1/roles/<id>
Media
CVE-2026-55165
Lemur: JWT verifier honors attacker-supplied alg, enabling ATO
Alta
CVE-2026-48508
Lemur has an authorization bypass in StrictRolePermission / AuthorityCreatorPermission
Media
CVE-2026-55162
Lemur: Crafted CRL/OCSP URLs in uploaded certificates lead to post-authentication SSRF
Media
CVE-2026-55164
Lemur user-update path stores plaintext passwords
Media
CVE-2026-48990
joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.