Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-109295 | 5.3 (v4.0) 4.3 (v3.1) | Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowled… |
open-webui |
open-webui |
2026-10-12T16:04:54.739Z | 2026-10-23T21:57:57.327Z |
| cve-2026-109294 | 7.1 (v4.0) 6.5 (v3.1) | Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via … |
open-webui |
open-webui |
2026-10-12T16:04:54.107Z | 2026-10-23T21:57:56.633Z |
| cve-2026-109293 | 7.1 (v4.0) 6.5 (v3.1) | Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure… |
open-webui |
open-webui |
2026-10-12T16:04:53.493Z | 2026-10-23T21:57:55.938Z |
| cve-2026-109292 | 7.6 (v4.0) 6.8 (v3.1) | Open WebUI 0.6.27 before 0.11.4 Session Token Disclosu… |
open-webui |
open-webui |
2026-10-12T16:04:52.925Z | 2026-10-23T21:57:55.255Z |
| cve-2026-109291 | 8.5 (v4.0) 7.3 (v3.1) | Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citatio… |
open-webui |
open-webui |
2026-10-12T16:04:52.313Z | 2026-10-23T21:57:54.568Z |
| cve-2026-109290 | 8.4 (v4.0) 8.7 (v3.1) | Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview |
open-webui |
open-webui |
2026-10-12T16:04:51.655Z | 2026-10-23T21:57:53.874Z |
| cve-2026-109289 | 5.3 (v4.0) 6.3 (v3.1) | Open WebUI 0.8.8 before 0.11.4 Improper Session Revoca… |
open-webui |
open-webui |
2026-10-12T16:04:51.020Z | 2026-10-23T21:57:53.211Z |
| cve-2026-109288 | 7.2 (v4.0) 6.4 (v3.1) | Open WebUI before 0.11.4 Stored XSS via javascript: UR… |
open-webui |
open-webui |
2026-10-12T16:04:50.352Z | 2026-10-23T21:57:52.520Z |
| cve-2026-109287 | 5.3 (v4.0) 4.3 (v3.1) | Open WebUI 0.9.6 before 0.11.4 Information Disclosure … |
open-webui |
open-webui |
2026-10-12T16:04:49.037Z | 2026-10-23T21:57:51.842Z |
| cve-2026-109286 | 8.6 (v4.0) 8.1 (v3.1) | Open WebUI 0.7.0 before 0.11.4 Session Token Theft via… |
open-webui |
open-webui |
2026-10-12T16:04:48.429Z | 2026-10-23T21:57:51.179Z |
| cve-2026-109285 | 2.3 (v4.0) 5 (v3.1) | Open WebUI 0.6.0 before 0.11.4 Improper Access Control… |
open-webui |
open-webui |
2026-10-12T16:04:47.776Z | 2026-10-23T21:57:50.570Z |
| cve-2026-109284 | 5.3 (v4.0) 4.3 (v3.1) | Open WebUI 0.11.0 before 0.11.4 Improper Authorization… |
open-webui |
open-webui |
2026-10-12T16:04:46.613Z | 2026-10-23T21:57:49.889Z |
| cve-2026-109283 | 5.3 (v4.0) 5.4 (v3.1) | Open WebUI 0.11.1 before 0.11.4 Authorization Bypass v… |
open-webui |
open-webui |
2026-10-12T16:04:46.013Z | 2026-10-23T21:57:49.217Z |
| cve-2026-109282 | 2 (v4.0) 2.5 (v3.1) | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 U… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:45.450Z | 2026-10-15T02:37:19.792Z |
| cve-2026-109281 | 4.8 (v4.0) 4.4 (v3.1) | ImageMagick 7.1.0-21 before 7.1.2-32 Heap Buffer Over-… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:44.689Z | 2026-10-18T11:42:56.574Z |
| cve-2026-109280 | 2 (v4.0) 2.5 (v3.1) | ImageMagick 7.1.0-20 before 7.1.2-32 Use After Free vi… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:44.049Z | 2026-10-13T18:06:44.481Z |
| cve-2026-109279 | 2 (v4.0) 2.5 (v3.1) | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 H… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:43.444Z | 2026-10-13T16:55:48.141Z |
| cve-2026-109278 | 6.3 (v4.0) 3.7 (v3.1) | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 M… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:42.786Z | 2026-10-13T15:36:33.584Z |
| cve-2026-109277 | 4.8 (v4.0) 3.3 (v3.1) | ImageMagick before 7.1.2-32 Policy Bypass via -script … |
ImageMagick |
ImageMagick |
2026-10-12T16:04:42.125Z | 2026-10-15T02:36:02.796Z |
| cve-2026-109276 | 6.9 (v4.0) 5.3 (v3.1) | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 T… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:41.501Z | 2026-10-18T11:53:04.537Z |
| cve-2026-109275 | 6.3 (v4.0) 4.8 (v3.1) | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 C… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:40.866Z | 2026-10-13T18:05:28.750Z |
| cve-2026-109274 | 2 (v4.0) 2.5 (v3.1) | ImageMagick before 7.1.2-32 TOCTOU Symlink Race Path P… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:40.260Z | 2026-10-13T16:55:57.170Z |
| cve-2026-109273 | 6.9 (v4.0) 5.3 (v3.1) | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 I… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:39.626Z | 2026-10-13T15:35:17.055Z |
| cve-2026-109272 | 6.3 (v4.0) 3.7 (v3.1) | ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dere… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:38.988Z | 2026-10-15T02:34:49.451Z |
| cve-2026-109271 | 6.3 (v4.0) 3.7 (v3.1) | ImageMagick 7.1.2-30 before 7.1.2-32 Use After Free in… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:38.129Z | 2026-10-18T11:53:04.678Z |
| cve-2026-109270 | 4.8 (v4.0) 3.3 (v3.1) | ImageMagick before 7.1.2-32 Memory Leak via -process Option |
ImageMagick |
ImageMagick |
2026-10-12T16:04:37.392Z | 2026-10-13T18:04:53.676Z |
| cve-2026-109269 | 6.9 (v4.0) 5.3 (v3.1) | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 I… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:36.689Z | 2026-10-13T16:56:11.142Z |
| cve-2026-109268 | 6.3 (v4.0) 3.7 (v3.1) | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 U… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:36.039Z | 2026-10-13T15:33:55.299Z |
| cve-2026-109267 | 6.9 (v4.0) 5.3 (v3.1) | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 S… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:35.334Z | 2026-10-15T02:33:58.753Z |
| cve-2026-109266 | 6.9 (v4.0) 5.3 (v3.1) | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 X… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:34.642Z | 2026-10-29T21:15:35.106Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-077 | Vulnérabilités dans Microsoft Internet Information Services (IIS) | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-076 | Vulnérabilité dans Microsoft Word | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-075 | Vulnérabilités dans Microsoft Office Publisher | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-074 | Plusieurs vulnérabilités dans le convertisseur de fichiers Microsoft Works | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-073 | Vulnérabilité dans Microsoft OLE Automation | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-072 | Multiples vulnérabilités dans Internet Explorer | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-071 | Vulnérabilité dans Microsoft Office | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-070 | Multiples vulnérabilités dans UltraVNC | 2008-02-12T00:00:00.000000 | 2008-02-12T00:00:00.000000 |
| certa-2008-avi-069 | Vulnérabilité du client Novell pour Windows | 2008-02-12T00:00:00.000000 | 2008-02-12T00:00:00.000000 |
| certa-2008-avi-068 | Vulnérabilités dans Mac OS X | 2008-02-12T00:00:00.000000 | 2008-02-12T00:00:00.000000 |
| certa-2008-avi-067 | Vulnérabilité du noyau Linux | 2008-02-11T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-066 | Multiples vulnérabilités dans Apache Tomcat | 2008-02-11T00:00:00.000000 | 2008-02-11T00:00:00.000000 |
| certa-2008-avi-065 | Multiples vulnérabilités dans HP-UX | 2008-02-08T00:00:00.000000 | 2008-02-08T00:00:00.000000 |
| certa-2008-avi-064 | Vulnérabilité dans Checkpoint SecureClient | 2008-02-08T00:00:00.000000 | 2008-02-08T00:00:00.000000 |
| certa-2008-avi-063 | Vulnérabilité dans Novell Client | 2008-02-08T00:00:00.000000 | 2008-02-08T00:00:00.000000 |
| certa-2008-avi-062 | Multiples vulnérabilités dans les produits Mozilla | 2008-02-08T00:00:00.000000 | 2008-02-11T00:00:00.000000 |
| certa-2008-avi-061 | Symantec Ghost Solution Suite | 2008-02-08T00:00:00.000000 | 2008-02-08T00:00:00.000000 |
| certa-2008-avi-060 | Vulnérabilité dans WordPress | 2008-02-08T00:00:00.000000 | 2008-02-08T00:00:00.000000 |
| certa-2008-avi-059 | Vulnérabilités dans Apple QuickTime et iPhoto | 2008-02-07T00:00:00.000000 | 2008-02-07T00:00:00.000000 |
| certa-2008-avi-058 | Vulnérabilité dans IBM WebSphere Edge Server | 2008-02-07T00:00:00.000000 | 2008-02-07T00:00:00.000000 |
| certa-2008-avi-057 | Multiples vulnérabilités dans HP Storage Essentials SRM | 2008-02-07T00:00:00.000000 | 2008-02-07T00:00:00.000000 |
| certa-2008-avi-056 | Vulnérabilité dans la pile IPv6 du projet KAME | 2008-02-07T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-055 | Vulnérabilité dans Symantec Altiris Notification Server Agent | 2008-02-07T00:00:00.000000 | 2008-02-07T00:00:00.000000 |
| certa-2008-avi-054 | Vulnérabilité dans ACDSee Photo Manager | 2008-02-07T00:00:00.000000 | 2008-02-07T00:00:00.000000 |
| certa-2008-avi-053 | Multiples vulnérabilités dans Adobe Reader | 2008-02-06T00:00:00.000000 | 2008-05-13T00:00:00.000000 |
| certa-2008-avi-052 | Vulnérabilités dans des produits Novell | 2008-02-06T00:00:00.000000 | 2008-02-06T00:00:00.000000 |
| certa-2008-avi-051 | Vulnérabilité dans Avaya Distributed Office | 2008-02-06T00:00:00.000000 | 2008-02-06T00:00:00.000000 |
| certa-2008-avi-050 | Vulnérabilité dans HP OpenView Node Manager (OV NNM) | 2008-02-06T00:00:00.000000 | 2008-02-06T00:00:00.000000 |
| certa-2008-avi-049 | Vulnérabilité dans des produits SAP | 2008-02-06T00:00:00.000000 | 2008-02-06T00:00:00.000000 |
| certa-2008-avi-048 | Plusieurs vulnérabilités dans IBM DB2 UDB | 2008-02-05T00:00:00.000000 | 2008-02-05T00:00:00.000000 |