Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
devalue has prototype pollution in devalue.parse and devalue.unflatten
ImageMagick: Integer overflow in DIB coder can result in out of bounds read or write
ImageMagick has uninitialized pointer dereference in JBIG decoder
ImageMagick has stack write buffer overflow in MNG encoder
ImageMagick has heap use-after-free in the MSL encoder
ImageMagick has Heap Use-After-Free in ImageMagick MSL decoder
ImageMagick: Write heap-buffer-overflow in PCL encoder via undersized output buffer
ImageMagick vulnerable to stack corruption through long morphology kernel names or arrays
ImageMagick has Integer Overflow leading to out of bounds write in SIXEL decoder
Winter vulnerable to privilege escalation by authenticated backend users
ImageMagick: Heap overflow in pcd decoder leads to out of bounds read.
ImageMagick has heap buffer overflow in YUV 4:2:2 decoder
ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)
ImageMagick: MSL - Stack overflow in ProcessMSLScript
ImageMagick Has Signed Integer Overflow in SIXEL Decoder, Leading to Memory Corruption
ImageMagick: MSL attribute stack buffer overflow leads to out of bounds write.
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker
SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module
Keycloak vulnerable to authorization bypass via the Admin API
yauzl contains an off-by-one error
@whyour/qinglong: manipulation of the argument command leads to protection mechanism failure
Simple Ajax Chat <= 20260217 - Unauthenticated Stored Cross-Site Scripting via 'c'
Mobile App Editor – WordPress to Android App Builder <= 1.3.1 - Authenticated (Editor+) Arbitrary File Upload
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.