Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.436
pypdf has a possible infinite loop when processing TreeObject
Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER
Hugging Face Smolagents has a Server-Side Request Forgery issue
NVIDIA NeMo Framework Deserializes Untrusted Data
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
OpenStack Nova calls qemu-img without format restrictions for resize
Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading
DiskCache has unsafe pickle deserialization
Skill-scanner Unsecured Network Binding Vulnerability
MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce auth token
MCP Run Python has a Sandbox Escape & Server Takeover Vulnerability
MCP Run Python Deno Sandbox Misconfiguration Allows SSRF Attacks via Localhost Access
LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
Emmett-Core: Unhandled CookieError Exception Causing Denial of Service
web2py has an Open Redirect Vulnerability
pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability
TensorFlow has Floating Point Exception in TensorListSplit with XLA
TensorFlow has null dereference on ParallelConcat with XLA
TensorFlow has Segfault in Bincount with XLA
TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
TensorFlow has Floating Point Exception in TFLite in conv kernel
WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute
FoodBook Lite <= 1.5.6 - Missing Authorization to Unauthenticated User Registration via 'registration_action' AJAX Action
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.