Alta
CVE-2024-12216
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Alta
CVE-2024-10906
DB-GPT vulnerable to Cross-Site Request Forgery
Media
CVE-2024-10908
FastChat open redirect vulnerability
Alta
CVE-2024-11602
Feast Cross-Origin Resource Sharing vulnerability
Media
CVE-2024-10940
langchain-core allows unauthorized users to read arbitrary files from the host file system
Alta
CVE-2024-11043
InvokeAI Uncontrolled Resource Consumption vulnerability
Alta
CVE-2024-10821
InvokeAI has Denial of Service (DoS) vulnerability in `/api/v1/images/upload`
Alta
CVE-2024-10907
FastChat Uncontrolled Resource Consumption vulnerability
Alta
CVE-2024-11603
FastChat Server-Side Request Forgery vulnerability
Alta
CVE-2024-10912
FastChat Denial of Service vulnerability
Alta
CVE-2024-10713
HyperLPR Denial of Service vulnerability
Alta
CVE-2024-10624
Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
Alta
CVE-2024-10648
Gradio Vulnerable to Arbitrary File Deletion
Alta
CVE-2024-10569
Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb
Alta
CVE-2024-10830
DB-GPT Path Traversal vulnerability
Alta
CVE-2024-10829
DB-GPT Uncontrolled Resource Consumption vulnerability
Alta
CVE-2024-10188
LiteLLM Vulnerable to Denial of Service (DoS)
Alta
CVE-2024-10110
Aim Vulnerable to Denial of Service (DoS)
Alta
CVE-2025-27154
Spotipy's cache file, containing spotify auth token, is created with overly broad permissions
Media
CVE-2025-26623
Exiv2 allows Use After Free
Media
CVE-2025-1300
CodeChecker open redirect when URL contains multiple slashes after the product name
Baja
CVE-2025-27145
copyparty renders unsanitized filenames as HTML when user uploads empty files
Alta
CVE-2025-25362
Spacy-LLM Server-Side Template Injection (SSTI) vulnerability
Media
CVE-2025-27516
Jinja2 vulnerable to sandbox breakout through attr filter selecting format method
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.