|
cve-2026-109294
|
7.1 (v4.0)
6.5 (v3.1)
|
Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via …
|
open-webui
|
open-webui
|
2026-10-12T16:04:54.107Z |
2026-10-23T21:57:56.633Z |
|
cve-2026-114266
|
|
ProjectWorlds Advanced Library Management System profi…
|
ProjectWorlds
|
Advanced Library Management System
|
2026-10-21T18:15:13.700Z |
2026-10-23T21:57:56.027Z |
|
cve-2026-109293
|
7.1 (v4.0)
6.5 (v3.1)
|
Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure…
|
open-webui
|
open-webui
|
2026-10-12T16:04:53.493Z |
2026-10-23T21:57:55.938Z |
|
cve-2026-109292
|
7.6 (v4.0)
6.8 (v3.1)
|
Open WebUI 0.6.27 before 0.11.4 Session Token Disclosu…
|
open-webui
|
open-webui
|
2026-10-12T16:04:52.925Z |
2026-10-23T21:57:55.255Z |
|
cve-2026-109291
|
8.5 (v4.0)
7.3 (v3.1)
|
Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citatio…
|
open-webui
|
open-webui
|
2026-10-12T16:04:52.313Z |
2026-10-23T21:57:54.568Z |
|
cve-2026-109290
|
8.4 (v4.0)
8.7 (v3.1)
|
Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview
|
open-webui
|
open-webui
|
2026-10-12T16:04:51.655Z |
2026-10-23T21:57:53.874Z |
|
cve-2026-109289
|
5.3 (v4.0)
6.3 (v3.1)
|
Open WebUI 0.8.8 before 0.11.4 Improper Session Revoca…
|
open-webui
|
open-webui
|
2026-10-12T16:04:51.020Z |
2026-10-23T21:57:53.211Z |
|
cve-2026-109288
|
7.2 (v4.0)
6.4 (v3.1)
|
Open WebUI before 0.11.4 Stored XSS via javascript: UR…
|
open-webui
|
open-webui
|
2026-10-12T16:04:50.352Z |
2026-10-23T21:57:52.520Z |
|
cve-2026-109287
|
5.3 (v4.0)
4.3 (v3.1)
|
Open WebUI 0.9.6 before 0.11.4 Information Disclosure …
|
open-webui
|
open-webui
|
2026-10-12T16:04:49.037Z |
2026-10-23T21:57:51.842Z |
|
cve-2026-109286
|
8.6 (v4.0)
8.1 (v3.1)
|
Open WebUI 0.7.0 before 0.11.4 Session Token Theft via…
|
open-webui
|
open-webui
|
2026-10-12T16:04:48.429Z |
2026-10-23T21:57:51.179Z |
|
cve-2026-109285
|
2.3 (v4.0)
5 (v3.1)
|
Open WebUI 0.6.0 before 0.11.4 Improper Access Control…
|
open-webui
|
open-webui
|
2026-10-12T16:04:47.776Z |
2026-10-23T21:57:50.570Z |
|
cve-2026-109284
|
5.3 (v4.0)
4.3 (v3.1)
|
Open WebUI 0.11.0 before 0.11.4 Improper Authorization…
|
open-webui
|
open-webui
|
2026-10-12T16:04:46.613Z |
2026-10-23T21:57:49.889Z |
|
cve-2026-109283
|
5.3 (v4.0)
5.4 (v3.1)
|
Open WebUI 0.11.1 before 0.11.4 Authorization Bypass v…
|
open-webui
|
open-webui
|
2026-10-12T16:04:46.013Z |
2026-10-23T21:57:49.217Z |
|
cve-2026-105944
|
10 (v4.0)
|
Apache Pulsar Manager: Missing authentication and auth…
|
Apache Software Foundation
|
Apache Pulsar Manager
|
2026-10-21T18:17:37.844Z |
2026-10-23T21:57:46.976Z |
|
cve-2026-105945
|
7.7 (v4.0)
|
Apache Pulsar: Improper Validation of Package Name Com…
|
Apache Software Foundation
|
Apache Pulsar
|
2026-10-21T18:18:26.687Z |
2026-10-23T21:57:38.167Z |
|
cve-2026-78118
|
7 (v3.1)
|
Race condition on kernel wait queues: unlocked z_waitq…
|
zephyrproject
|
zephyr
|
2026-10-21T18:19:32.200Z |
2026-10-23T21:28:10.701Z |
|
cve-2026-78119
|
6.3 (v3.1)
|
Out-of-bounds write in the Nuvoton NPCX eSPI Target-At…
|
zephyrproject
|
zephyr
|
2026-10-21T18:19:33.366Z |
2026-10-23T21:27:51.509Z |
|
cve-2026-19947
|
5.3 (v3.1)
|
Missing kernel object permission check in devmux sysca…
|
zephyrproject
|
zephyr
|
2026-10-21T18:19:35.637Z |
2026-10-23T21:23:27.801Z |
|
cve-2026-111804
|
8.2 (v3.1)
8.8 (v4.0)
|
Apache Traffic Server: wasm plugin has a use-after-fre…
|
Apache Software Foundation
|
Apache Traffic Server
|
2026-10-21T18:21:32.055Z |
2026-10-23T21:23:16.760Z |
|
cve-2026-111816
|
9.3 (v3.1)
9.2 (v4.0)
|
Apache Traffic Server: A malformed 302 response bypass…
|
Apache Software Foundation
|
Apache Traffic Server
|
2026-10-21T18:26:32.566Z |
2026-10-23T21:22:57.204Z |
|
cve-2026-111805
|
8.6 (v3.1)
7.7 (v4.0)
|
Apache Traffic Server: HTTP/2 Content-Length truncatio…
|
Apache Software Foundation
|
Apache Traffic Server
|
2026-10-21T19:10:46.319Z |
2026-10-23T21:22:42.961Z |
|
cve-2026-111808
|
8.6 (v3.1)
7.7 (v4.0)
|
Apache Traffic Server: HTTP/2 DATA frame padding under…
|
Apache Software Foundation
|
Apache Traffic Server
|
2026-10-21T19:11:59.516Z |
2026-10-23T21:22:09.150Z |
|
cve-2026-111810
|
7.5 (v3.1)
8.7 (v4.0)
|
Apache Traffic Server: Unthrottled per-header diagnost…
|
Apache Software Foundation
|
Apache Traffic Server
|
2026-10-21T19:14:50.479Z |
2026-10-23T21:21:35.176Z |
|
cve-2026-111817
|
5.3 (v3.1)
6.9 (v4.0)
|
Apache Traffic Server: Dropping chunked trailers stall…
|
Apache Software Foundation
|
Apache Traffic Server
|
2026-10-21T19:20:00.515Z |
2026-10-23T21:21:06.850Z |
|
cve-2026-112381
|
5.9 (v3.1)
8.2 (v4.0)
|
Apache Traffic Server: Nullptr dereference in net_writ…
|
Apache Software Foundation
|
Apache Traffic Server
|
2026-10-21T19:20:38.885Z |
2026-10-23T21:20:44.000Z |
|
cve-2026-114375
|
|
leomoon-studios wiki-go Files Rename API files.go Rena…
|
leomoon-studios
|
wiki-go
|
2026-10-21T19:45:20.856Z |
2026-10-23T21:20:14.859Z |
|
cve-2026-114141
|
|
toml-node: Quadratic-complexity DoS via many array-of-…
|
BinaryMuse
|
toml-node
|
2026-10-21T20:25:36.396Z |
2026-10-23T21:20:03.858Z |
|
cve-2026-114378
|
|
itsourcecode Online Cake Ordering System deleteproduct…
|
itsourcecode
|
Online Cake Ordering System
|
2026-10-21T20:30:18.507Z |
2026-10-23T21:19:18.865Z |
|
cve-2026-96643
|
|
Pillow: PNG eXIf chunk makes EXIF parsing run in quadr…
|
python-pillow
|
Pillow
|
2026-10-21T20:56:26.344Z |
2026-10-23T21:19:12.901Z |
|
cve-2026-96637
|
|
Pillow: Decompression bomb check bypass in SpiderImage…
|
python-pillow
|
Pillow
|
2026-10-21T21:01:20.249Z |
2026-10-23T21:18:59.858Z |