Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-109292 | 7.6 (v4.0) 6.8 (v3.1) | Open WebUI 0.6.27 before 0.11.4 Session Token Disclosu… |
open-webui |
open-webui |
2026-10-12T16:04:52.925Z | 2026-10-23T21:57:55.255Z |
| cve-2026-109291 | 8.5 (v4.0) 7.3 (v3.1) | Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citatio… |
open-webui |
open-webui |
2026-10-12T16:04:52.313Z | 2026-10-23T21:57:54.568Z |
| cve-2026-109290 | 8.4 (v4.0) 8.7 (v3.1) | Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview |
open-webui |
open-webui |
2026-10-12T16:04:51.655Z | 2026-10-23T21:57:53.874Z |
| cve-2026-109289 | 5.3 (v4.0) 6.3 (v3.1) | Open WebUI 0.8.8 before 0.11.4 Improper Session Revoca… |
open-webui |
open-webui |
2026-10-12T16:04:51.020Z | 2026-10-23T21:57:53.211Z |
| cve-2026-109288 | 7.2 (v4.0) 6.4 (v3.1) | Open WebUI before 0.11.4 Stored XSS via javascript: UR… |
open-webui |
open-webui |
2026-10-12T16:04:50.352Z | 2026-10-23T21:57:52.520Z |
| cve-2026-109287 | 5.3 (v4.0) 4.3 (v3.1) | Open WebUI 0.9.6 before 0.11.4 Information Disclosure … |
open-webui |
open-webui |
2026-10-12T16:04:49.037Z | 2026-10-23T21:57:51.842Z |
| cve-2026-109286 | 8.6 (v4.0) 8.1 (v3.1) | Open WebUI 0.7.0 before 0.11.4 Session Token Theft via… |
open-webui |
open-webui |
2026-10-12T16:04:48.429Z | 2026-10-23T21:57:51.179Z |
| cve-2026-109285 | 2.3 (v4.0) 5 (v3.1) | Open WebUI 0.6.0 before 0.11.4 Improper Access Control… |
open-webui |
open-webui |
2026-10-12T16:04:47.776Z | 2026-10-23T21:57:50.570Z |
| cve-2026-109284 | 5.3 (v4.0) 4.3 (v3.1) | Open WebUI 0.11.0 before 0.11.4 Improper Authorization… |
open-webui |
open-webui |
2026-10-12T16:04:46.613Z | 2026-10-23T21:57:49.889Z |
| cve-2026-109283 | 5.3 (v4.0) 5.4 (v3.1) | Open WebUI 0.11.1 before 0.11.4 Authorization Bypass v… |
open-webui |
open-webui |
2026-10-12T16:04:46.013Z | 2026-10-23T21:57:49.217Z |
| cve-2026-105944 | 10 (v4.0) | Apache Pulsar Manager: Missing authentication and auth… |
Apache Software Foundation |
Apache Pulsar Manager |
2026-10-21T18:17:37.844Z | 2026-10-23T21:57:46.976Z |
| cve-2026-105945 | 7.7 (v4.0) | Apache Pulsar: Improper Validation of Package Name Com… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:18:26.687Z | 2026-10-23T21:57:38.167Z |
| cve-2026-78118 | 7 (v3.1) | Race condition on kernel wait queues: unlocked z_waitq… |
zephyrproject |
zephyr |
2026-10-21T18:19:32.200Z | 2026-10-23T21:28:10.701Z |
| cve-2026-78119 | 6.3 (v3.1) | Out-of-bounds write in the Nuvoton NPCX eSPI Target-At… |
zephyrproject |
zephyr |
2026-10-21T18:19:33.366Z | 2026-10-23T21:27:51.509Z |
| cve-2026-19947 | 5.3 (v3.1) | Missing kernel object permission check in devmux sysca… |
zephyrproject |
zephyr |
2026-10-21T18:19:35.637Z | 2026-10-23T21:23:27.801Z |
| cve-2026-111804 | 8.2 (v3.1) 8.8 (v4.0) | Apache Traffic Server: wasm plugin has a use-after-fre… |
Apache Software Foundation |
Apache Traffic Server |
2026-10-21T18:21:32.055Z | 2026-10-23T21:23:16.760Z |
| cve-2026-111816 | 9.3 (v3.1) 9.2 (v4.0) | Apache Traffic Server: A malformed 302 response bypass… |
Apache Software Foundation |
Apache Traffic Server |
2026-10-21T18:26:32.566Z | 2026-10-23T21:22:57.204Z |
| cve-2026-111805 | 8.6 (v3.1) 7.7 (v4.0) | Apache Traffic Server: HTTP/2 Content-Length truncatio… |
Apache Software Foundation |
Apache Traffic Server |
2026-10-21T19:10:46.319Z | 2026-10-23T21:22:42.961Z |
| cve-2026-111808 | 8.6 (v3.1) 7.7 (v4.0) | Apache Traffic Server: HTTP/2 DATA frame padding under… |
Apache Software Foundation |
Apache Traffic Server |
2026-10-21T19:11:59.516Z | 2026-10-23T21:22:09.150Z |
| cve-2026-111810 | 7.5 (v3.1) 8.7 (v4.0) | Apache Traffic Server: Unthrottled per-header diagnost… |
Apache Software Foundation |
Apache Traffic Server |
2026-10-21T19:14:50.479Z | 2026-10-23T21:21:35.176Z |
| cve-2026-111817 | 5.3 (v3.1) 6.9 (v4.0) | Apache Traffic Server: Dropping chunked trailers stall… |
Apache Software Foundation |
Apache Traffic Server |
2026-10-21T19:20:00.515Z | 2026-10-23T21:21:06.850Z |
| cve-2026-112381 | 5.9 (v3.1) 8.2 (v4.0) | Apache Traffic Server: Nullptr dereference in net_writ… |
Apache Software Foundation |
Apache Traffic Server |
2026-10-21T19:20:38.885Z | 2026-10-23T21:20:44.000Z |
| cve-2026-114375 | leomoon-studios wiki-go Files Rename API files.go Rena… |
leomoon-studios |
wiki-go |
2026-10-21T19:45:20.856Z | 2026-10-23T21:20:14.859Z | |
| cve-2026-114141 | toml-node: Quadratic-complexity DoS via many array-of-… |
BinaryMuse |
toml-node |
2026-10-21T20:25:36.396Z | 2026-10-23T21:20:03.858Z | |
| cve-2026-114378 | itsourcecode Online Cake Ordering System deleteproduct… |
itsourcecode |
Online Cake Ordering System |
2026-10-21T20:30:18.507Z | 2026-10-23T21:19:18.865Z | |
| cve-2026-96643 | Pillow: PNG eXIf chunk makes EXIF parsing run in quadr… |
python-pillow |
Pillow |
2026-10-21T20:56:26.344Z | 2026-10-23T21:19:12.901Z | |
| cve-2026-96637 | Pillow: Decompression bomb check bypass in SpiderImage… |
python-pillow |
Pillow |
2026-10-21T21:01:20.249Z | 2026-10-23T21:18:59.858Z | |
| cve-2026-114381 | itsourcecode Online Cake Ordering System orderdetail.p… |
itsourcecode |
Online Cake Ordering System |
2026-10-21T21:15:17.882Z | 2026-10-23T21:18:36.060Z | |
| cve-2026-114508 | Laravel relationship inclusion can trigger unauthorize… |
laravel |
framework |
2026-10-21T21:45:31.465Z | 2026-10-23T21:18:11.415Z | |
| cve-2026-114384 | itsourcecode Online Cake Ordering System transactionsa… |
itsourcecode |
Online Cake Ordering System |
2026-10-21T22:00:18.707Z | 2026-10-23T21:17:46.796Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2003-avi-116 | Vulnérabilité dans DirectX | 2003-07-24T00:00:00.000000 | 2003-07-24T00:00:00.000000 |
| certa-2003-avi-115 | Vulnérabilité dans une fonction de gestion de fichiers sous Windows NT 4.0 Server | 2003-07-24T00:00:00.000000 | 2003-07-24T00:00:00.000000 |
| certa-2003-avi-109 | Vulnérabilité dans nfs-utils | 2003-07-15T00:00:00.000000 | 2003-07-24T00:00:00.000000 |
| certa-2003-avi-087 | Vulnérabilités dans le noyau linux 2.4 | 2003-05-16T00:00:00.000000 | 2003-07-24T00:00:00.000000 |
| certa-2003-avi-114 | Vulnérabilité dans CISCO IOS | 2003-07-17T00:00:00.000000 | 2003-07-17T00:00:00.000000 |
| certa-2003-avi-113 | Vulnérabilité dans ISA Server | 2003-07-17T00:00:00.000000 | 2003-07-17T00:00:00.000000 |
| certa-2003-avi-112 | Vulnérabilité dans le Shell Windows | 2003-07-17T00:00:00.000000 | 2003-07-17T00:00:00.000000 |
| certa-2003-avi-111 | Vulnérabilité dans l'interface RPC Windows | 2003-07-17T00:00:00.000000 | 2003-07-17T00:00:00.000000 |
| certa-2003-avi-108 | Vulnérabilité dans ScreenOS | 2003-07-15T00:00:00.000000 | 2003-07-15T00:00:00.000000 |
| certa-2003-avi-104 | Vulnérabilité dans le convertisseur HTML de Microsoft | 2003-07-10T00:00:00.000000 | 2003-07-15T00:00:00.000000 |
| certa-2003-avi-100 | Multiples vulnérabilités d'Ethereal | 2003-06-24T00:00:00.000000 | 2003-07-15T00:00:00.000000 |
| certa-2003-avi-107 | Vulnérabilité de Macromedia ColdFusion MX et Macromedia JRun 4.0 | 2003-07-11T00:00:00.000000 | 2003-07-11T00:00:00.000000 |
| certa-2003-avi-106 | Vulnérabilité dans Utility Manager sous Windows | 2003-07-10T00:00:00.000000 | 2003-07-10T00:00:00.000000 |
| certa-2003-avi-105 | Vulnérabilité de SMB dans Microsoft Windows | 2003-07-10T00:00:00.000000 | 2003-07-10T00:00:00.000000 |
| certa-2003-avi-103 | Vulnérabilité dans CISCO CatOS | 2003-07-10T00:00:00.000000 | 2003-07-10T00:00:00.000000 |
| certa-2003-avi-101 | Vulnérabilité dans Windows Media Player 9 | 2003-06-27T00:00:00.000000 | 2003-06-27T00:00:00.000000 |
| certa-2003-avi-099 | Multiples vulnérabilités sous Solaris | 2003-06-23T00:00:00.000000 | 2003-06-23T00:00:00.000000 |
| certa-2003-avi-094 | Vulnérabilité du service d'impression CUPS | 2003-05-30T00:00:00.000000 | 2003-06-12T00:00:00.000000 |
| certa-2003-avi-098 | Multiples vulnérabilités de CDE sur les plate-formes HP Tru64 UNIX et HP-UX | 2003-06-05T00:00:00.000000 | 2003-06-05T00:00:00.000000 |
| certa-2003-avi-097 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2003-06-05T00:00:00.000000 | 2003-06-05T00:00:00.000000 |
| certa-2003-avi-096 | Vulnérabilité dans SunMC Change Manager | 2003-06-04T00:00:00.000000 | 2003-06-04T00:00:00.000000 |
| certa-2003-avi-095 | Multiples vulnérabilités du serveur HTTP Apache | 2003-06-02T00:00:00.000000 | 2003-06-02T00:00:00.000000 |
| certa-2003-avi-093 | Vulnérabilité de Microsoft Windows Media Services Extension | 2003-05-30T00:00:00.000000 | 2003-05-30T00:00:00.000000 |
| certa-2003-avi-092 | Correctif cumulatif pour Internet Information Server | 2003-05-30T00:00:00.000000 | 2003-05-30T00:00:00.000000 |
| certa-2003-avi-090 | Multiples vulnérabilités sous HP-UX | 2003-05-23T00:00:00.000000 | 2003-05-30T00:00:00.000000 |
| certa-2003-avi-052 | Vulnérabilité dans les Sun RPC | 2003-03-20T00:00:00.000000 | 2003-05-30T00:00:00.000000 |
| certa-2003-avi-091 | Vulnérabilité de IPSec sous MacOS X | 2003-05-27T00:00:00.000000 | 2003-05-27T00:00:00.000000 |
| certa-2003-avi-072 | Vulnérabilité sur Samba | 2003-04-07T00:00:00.000000 | 2003-05-22T00:00:00.000000 |
| certa-2003-avi-046 | Faille dans le système d'impression lpr | 2003-03-14T00:00:00.000000 | 2003-05-22T00:00:00.000000 |
| certa-2003-avi-089 | Vulnérabilité dans cdrecord | 2003-05-19T00:00:00.000000 | 2003-05-19T00:00:00.000000 |