Vulnerabilidades en picklescan

51 resultados
Análisis Vexday

O picklescan apresenta 46 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando risco recente e em evolução. Oito dessas vulnerabilidades são críticas (CVSS alto), predominantemente relacionadas à desserialização insegura (CWE-502), que permite execução remota de código. Embora nenhuma esteja sob ataque ativo documentado no momento, o volume concentrado de divulgações recentes exige atenção imediata em ambientes que processam dados serializados de fontes não confiáveis.

CVE-2026-56315CRITICALpicklescan - Remote Code Execution via Unblocked Standard Library ModulesEPSS 1.1%CVE-2026-3490CRITICALpicklescan - Universal Blocklist Bypass via pkgutil.resolve_nameEPSS 0.9%CVE-2025-71368HIGHpicklescan - Arbitrary Code Execution via Undetected doctest.debug_scriptEPSS 0.8%CVE-2025-71364HIGHpicklescan - Arbitrary Code Execution via Undetected asyncio.unix_events._UnixSubprocessTransport._startEPSS 0.8%CVE-2025-71323CRITICALpicklescan - Remote Code Execution via Unblocked ctypes ModuleEPSS 0.8%CVE-2026-53874CRITICALpicklescan - Arbitrary Code Execution via Obfuscated eval CallEPSS 0.8%CVE-2025-71351HIGHpicklescan - Remote Code Execution via timeit.timeit() Detection BypassEPSS 0.7%CVE-2026-53875HIGHpicklescan - Scanning Bypass via Dynamic Eval in scan_pytorchEPSS 0.7%CVE-2026-53872HIGHpicklescan - Arbitrary File Read via Unsafe Pickle DeserializationEPSS 0.7%CVE-2026-53873CRITICALpicklescan - Arbitrary Code Execution via profile.run() Blocklist BypassEPSS 0.7%CVE-2025-71363HIGHpicklescan - Arbitrary Code Execution via Undetected cProfile.run in Pickle DeserializationEPSS 0.6%CVE-2025-71367HIGHpicklescan - Remote Code Execution via _operator.attrgetter Detection BypassEPSS 0.6%CVE-2025-71344HIGHpicklescan - Arbitrary Code Execution via Undetected ensurepip._run_pip FunctionEPSS 0.6%CVE-2025-71347HIGHpicklescan - Undetected Remote Code Execution via numpy.f2py.crackfortran.param_evalEPSS 0.6%CVE-2025-71369HIGHpicklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlersEPSS 0.6%CVE-2025-71366HIGHpicklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofileEPSS 0.6%CVE-2025-71374HIGHpicklescan - Arbitrary Code Execution via Undetected profile.Profile.runEPSS 0.6%CVE-2025-71352HIGHpicklescan - Remote Code Execution via Undetected trace.Trace.runctx in Pickle FilesEPSS 0.6%CVE-2025-71373HIGHpicklescan - Remote Code Execution via operator.methodcaller Detection BypassEPSS 0.6%CVE-2025-71321CRITICALpicklescan - Arbitrary File Writing via distutils Module BypassEPSS 0.6%