Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-114257 | oretnom23 file-management-system-php File Download dow… |
oretnom23 |
file-management-system-php |
2026-10-21T16:00:20.862Z | 2026-10-23T22:05:58.318Z | |
| cve-2026-114260 | oretnom23 file-management-system-php AJAX ajax.php del… |
oretnom23 |
file-management-system-php |
2026-10-21T16:45:08.221Z | 2026-10-23T22:05:33.996Z | |
| cve-2026-114263 | ProjectWorlds Advanced Library Management System indiv… |
ProjectWorlds |
Advanced Library Management System |
2026-10-21T17:30:08.284Z | 2026-10-23T22:05:22.435Z | |
| cve-2026-105932 | 2.3 (v4.0) | Apache Pulsar: Missing topic policy authorization on n… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:06:59.228Z | 2026-10-23T22:04:58.691Z |
| cve-2026-105933 | 2.3 (v4.0) | Apache Pulsar: Namespace encryption requirement not en… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:07:43.954Z | 2026-10-23T22:00:14.676Z |
| cve-2026-105934 | 7.2 (v4.0) | Apache Pulsar: Missing tenant admin authorization chec… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:08:43.192Z | 2026-10-23T22:00:04.202Z |
| cve-2026-105935 | 4.9 (v4.0) | Apache Pulsar: Function trigger publishes to the input… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:10:24.056Z | 2026-10-23T21:59:37.544Z |
| cve-2026-105936 | 5.3 (v4.0) | Apache Pulsar: Functions connectors list endpoint does… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:11:20.520Z | 2026-10-23T21:59:10.187Z |
| cve-2026-105937 | 8.7 (v4.0) | Apache Pulsar: Missing authorization of the shadow top… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:12:51.420Z | 2026-10-23T21:58:44.482Z |
| cve-2026-105938 | 2.3 (v4.0) | Apache Pulsar: Subscription authorization policies not… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:13:35.337Z | 2026-10-23T21:58:15.976Z |
| cve-2026-105942 | 7.7 (v4.0) | Apache Pulsar: Original principal of proxied requests … |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:14:35.996Z | 2026-10-23T21:58:05.657Z |
| cve-2026-109572 | 7.2 (v4.0) 7.6 (v3.1) | Open WebUI 0.8.6 before 0.11.4 Privilege Escalation vi… |
open-webui |
open-webui |
2026-10-12T22:21:48.699Z | 2026-10-23T21:58:00.807Z |
| cve-2026-109299 | 7.1 (v4.0) 6.5 (v3.1) | Open WebUI 0.9.0 before 0.11.4 Denial of Service via R… |
open-webui |
open-webui |
2026-10-12T16:04:57.527Z | 2026-10-23T21:58:00.118Z |
| cve-2026-109298 | 7.1 (v4.0) 6.5 (v3.1) | Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via … |
open-webui |
open-webui |
2026-10-12T16:04:56.895Z | 2026-10-23T21:57:59.402Z |
| cve-2026-109297 | 7.1 (v4.0) 6.5 (v3.1) | Open WebUI 0.11.0 before 0.11.4 Denial of Service via … |
open-webui |
open-webui |
2026-10-12T16:04:56.082Z | 2026-10-23T21:57:58.716Z |
| cve-2026-109296 | 5.3 (v4.0) 4.3 (v3.1) | Open WebUI before 0.11.4 Missing Authorization via Bac… |
open-webui |
open-webui |
2026-10-12T16:04:55.400Z | 2026-10-23T21:57:58.019Z |
| cve-2026-109295 | 5.3 (v4.0) 4.3 (v3.1) | Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowled… |
open-webui |
open-webui |
2026-10-12T16:04:54.739Z | 2026-10-23T21:57:57.327Z |
| cve-2026-109294 | 7.1 (v4.0) 6.5 (v3.1) | Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via … |
open-webui |
open-webui |
2026-10-12T16:04:54.107Z | 2026-10-23T21:57:56.633Z |
| cve-2026-114266 | ProjectWorlds Advanced Library Management System profi… |
ProjectWorlds |
Advanced Library Management System |
2026-10-21T18:15:13.700Z | 2026-10-23T21:57:56.027Z | |
| cve-2026-109293 | 7.1 (v4.0) 6.5 (v3.1) | Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure… |
open-webui |
open-webui |
2026-10-12T16:04:53.493Z | 2026-10-23T21:57:55.938Z |
| cve-2026-109292 | 7.6 (v4.0) 6.8 (v3.1) | Open WebUI 0.6.27 before 0.11.4 Session Token Disclosu… |
open-webui |
open-webui |
2026-10-12T16:04:52.925Z | 2026-10-23T21:57:55.255Z |
| cve-2026-109291 | 8.5 (v4.0) 7.3 (v3.1) | Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citatio… |
open-webui |
open-webui |
2026-10-12T16:04:52.313Z | 2026-10-23T21:57:54.568Z |
| cve-2026-109290 | 8.4 (v4.0) 8.7 (v3.1) | Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview |
open-webui |
open-webui |
2026-10-12T16:04:51.655Z | 2026-10-23T21:57:53.874Z |
| cve-2026-109289 | 5.3 (v4.0) 6.3 (v3.1) | Open WebUI 0.8.8 before 0.11.4 Improper Session Revoca… |
open-webui |
open-webui |
2026-10-12T16:04:51.020Z | 2026-10-23T21:57:53.211Z |
| cve-2026-109288 | 7.2 (v4.0) 6.4 (v3.1) | Open WebUI before 0.11.4 Stored XSS via javascript: UR… |
open-webui |
open-webui |
2026-10-12T16:04:50.352Z | 2026-10-23T21:57:52.520Z |
| cve-2026-109287 | 5.3 (v4.0) 4.3 (v3.1) | Open WebUI 0.9.6 before 0.11.4 Information Disclosure … |
open-webui |
open-webui |
2026-10-12T16:04:49.037Z | 2026-10-23T21:57:51.842Z |
| cve-2026-109286 | 8.6 (v4.0) 8.1 (v3.1) | Open WebUI 0.7.0 before 0.11.4 Session Token Theft via… |
open-webui |
open-webui |
2026-10-12T16:04:48.429Z | 2026-10-23T21:57:51.179Z |
| cve-2026-109285 | 2.3 (v4.0) 5 (v3.1) | Open WebUI 0.6.0 before 0.11.4 Improper Access Control… |
open-webui |
open-webui |
2026-10-12T16:04:47.776Z | 2026-10-23T21:57:50.570Z |
| cve-2026-109284 | 5.3 (v4.0) 4.3 (v3.1) | Open WebUI 0.11.0 before 0.11.4 Improper Authorization… |
open-webui |
open-webui |
2026-10-12T16:04:46.613Z | 2026-10-23T21:57:49.889Z |
| cve-2026-109283 | 5.3 (v4.0) 5.4 (v3.1) | Open WebUI 0.11.1 before 0.11.4 Authorization Bypass v… |
open-webui |
open-webui |
2026-10-12T16:04:46.013Z | 2026-10-23T21:57:49.217Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2003-avi-146 | Vulnérabilité du convertisseur Microsoft WordPerfect | 2003-09-04T00:00:00.000000 | 2003-09-04T00:00:00.000000 |
| certa-2003-avi-145 | Vulnérabilité de Microsoft Word | 2003-09-04T00:00:00.000000 | 2003-09-04T00:00:00.000000 |
| certa-2003-avi-144 | Vulnérabilité de NetBIOS | 2003-09-04T00:00:00.000000 | 2003-09-04T00:00:00.000000 |
| certa-2003-avi-132 | Vulnérabilité du serveur wu-ftpd | 2003-08-01T00:00:00.000000 | 2003-09-04T00:00:00.000000 |
| certa-2003-avi-143 | Vulnérabilités dans XFree86 | 2003-09-03T00:00:00.000000 | 2003-09-03T00:00:00.000000 |
| certa-2003-avi-141 | Vulnérabilité de sendmail | 2003-08-27T00:00:00.000000 | 2003-09-03T00:00:00.000000 |
| certa-2003-avi-142 | Défaut du client SNTP des routeurs Netgear | 2003-08-28T00:00:00.000000 | 2003-08-28T00:00:00.000000 |
| certa-2003-avi-140 | Vulnérabilité de Microsoft Data Access Components | 2003-08-21T00:00:00.000000 | 2003-08-21T00:00:00.000000 |
| certa-2003-avi-139 | Multiples vulnérabilités dans Internet Explorer | 2003-08-21T00:00:00.000000 | 2003-08-21T00:00:00.000000 |
| certa-2003-avi-138 | Vulnérabilité de la commande UnZip | 2003-08-20T00:00:00.000000 | 2003-08-20T00:00:00.000000 |
| certa-2003-avi-137 | Vulnérabilités de l'application CiscoWorks | 2003-08-19T00:00:00.000000 | 2003-08-19T00:00:00.000000 |
| certa-2003-avi-136 | Vulnérabilité du serveur in.ftpd sous Solaris 9 | 2003-08-18T00:00:00.000000 | 2003-08-18T00:00:00.000000 |
| certa-2003-avi-134 | Vulnérabilité de la fonction realpath pour les systèmes BSD | 2003-08-06T00:00:00.000000 | 2003-08-18T00:00:00.000000 |
| certa-2003-avi-135 | Vulnérabilités du serveur de messagerie Postfix | 2003-08-07T00:00:00.000000 | 2003-08-07T00:00:00.000000 |
| certa-2003-avi-133 | Multiples failles dans McAfee »Security ePolicy Orchestrator» | 2003-08-01T00:00:00.000000 | 2003-08-01T00:00:00.000000 |
| certa-2003-avi-131 | Vulnérabilité sur les gardes-barrières NetScreen | 2003-08-01T00:00:00.000000 | 2003-08-01T00:00:00.000000 |
| certa-2003-avi-127 | Vulnérabilité dans l'éditeur de liens dynamiques sur Solaris | 2003-07-31T00:00:00.000000 | 2003-08-01T00:00:00.000000 |
| certa-2003-avi-130 | Vulnérabilité de l'application Stunnel | 2003-07-31T00:00:00.000000 | 2003-07-31T00:00:00.000000 |
| certa-2003-avi-129 | Vulnérabilité du serveur HTTP dans CISCO IOS | 2003-07-31T00:00:00.000000 | 2003-07-31T00:00:00.000000 |
| certa-2003-avi-128 | Vulnérabilité dans CISCO IOS | 2003-07-31T00:00:00.000000 | 2003-07-31T00:00:00.000000 |
| certa-2003-avi-126 | Vulnérabilité de Workgroup Manager de MacOS X | 2003-07-25T00:00:00.000000 | 2003-07-25T00:00:00.000000 |
| certa-2003-avi-125 | Vulnérabilité de Merge de SCO UnixWare | 2003-07-25T00:00:00.000000 | 2003-07-25T00:00:00.000000 |
| certa-2003-avi-124 | Vulnérabilité de VMware pour plates-formes Linux | 2003-07-25T00:00:00.000000 | 2003-07-25T00:00:00.000000 |
| certa-2003-avi-123 | Vulnérabilité dans les serveurs Novell Netware | 2003-07-25T00:00:00.000000 | 2003-07-25T00:00:00.000000 |
| certa-2003-avi-122 | Vulnérabilité dans EXTPROC d'Oracle Database Server | 2003-07-25T00:00:00.000000 | 2003-07-25T00:00:00.000000 |
| certa-2003-avi-121 | Débordement de mémoire dans le programme FNDWRR de la suite Oracle E-Business | 2003-07-25T00:00:00.000000 | 2003-07-25T00:00:00.000000 |
| certa-2003-avi-120 | Vulnérabilité dans la suite Oracle E-Business | 2003-07-25T00:00:00.000000 | 2003-07-25T00:00:00.000000 |
| certa-2003-avi-119 | Vulnérabilité IPv6 dans Solaris 8 | 2003-07-24T00:00:00.000000 | 2003-07-24T00:00:00.000000 |
| certa-2003-avi-118 | Multiples vulnérabilités dans le noyau linux 2.4 | 2003-07-24T00:00:00.000000 | 2003-07-24T00:00:00.000000 |
| certa-2003-avi-117 | Vulnérabilités dans MS-SQL Server | 2003-07-24T00:00:00.000000 | 2003-07-24T00:00:00.000000 |