|
cve-2026-42022
|
|
Multiple stack-based buffer overflow vulnerabilit…
|
totolink
|
Totolink
|
2026-10-20T20:25:23.607Z |
2026-10-23T22:08:24.455Z |
|
cve-2026-42023
|
|
Multiple stack-based buffer overflow vulnerabilit…
|
totolink
|
Totolink
|
2026-10-20T20:25:23.697Z |
2026-10-23T22:07:29.374Z |
|
cve-2026-42024
|
|
Multiple stack-based buffer overflow vulnerabilit…
|
totolink
|
Totolink
|
2026-10-20T20:25:23.785Z |
2026-10-23T22:07:17.261Z |
|
cve-2026-35499
|
|
An os command injection vulnerability exists in t…
|
totolink
|
Totolink
|
2026-10-20T20:25:27.054Z |
2026-10-23T22:06:35.416Z |
|
cve-2026-114254
|
|
oretnom23 file-management-system-php admin_class.php l…
|
oretnom23
|
file-management-system-php
|
2026-10-21T15:15:07.790Z |
2026-10-23T22:06:16.384Z |
|
cve-2026-114257
|
|
oretnom23 file-management-system-php File Download dow…
|
oretnom23
|
file-management-system-php
|
2026-10-21T16:00:20.862Z |
2026-10-23T22:05:58.318Z |
|
cve-2026-114260
|
|
oretnom23 file-management-system-php AJAX ajax.php del…
|
oretnom23
|
file-management-system-php
|
2026-10-21T16:45:08.221Z |
2026-10-23T22:05:33.996Z |
|
cve-2026-114263
|
|
ProjectWorlds Advanced Library Management System indiv…
|
ProjectWorlds
|
Advanced Library Management System
|
2026-10-21T17:30:08.284Z |
2026-10-23T22:05:22.435Z |
|
cve-2026-105932
|
2.3 (v4.0)
|
Apache Pulsar: Missing topic policy authorization on n…
|
Apache Software Foundation
|
Apache Pulsar
|
2026-10-21T18:06:59.228Z |
2026-10-23T22:04:58.691Z |
|
cve-2026-105933
|
2.3 (v4.0)
|
Apache Pulsar: Namespace encryption requirement not en…
|
Apache Software Foundation
|
Apache Pulsar
|
2026-10-21T18:07:43.954Z |
2026-10-23T22:00:14.676Z |
|
cve-2026-105934
|
7.2 (v4.0)
|
Apache Pulsar: Missing tenant admin authorization chec…
|
Apache Software Foundation
|
Apache Pulsar
|
2026-10-21T18:08:43.192Z |
2026-10-23T22:00:04.202Z |
|
cve-2026-105935
|
4.9 (v4.0)
|
Apache Pulsar: Function trigger publishes to the input…
|
Apache Software Foundation
|
Apache Pulsar
|
2026-10-21T18:10:24.056Z |
2026-10-23T21:59:37.544Z |
|
cve-2026-105936
|
5.3 (v4.0)
|
Apache Pulsar: Functions connectors list endpoint does…
|
Apache Software Foundation
|
Apache Pulsar
|
2026-10-21T18:11:20.520Z |
2026-10-23T21:59:10.187Z |
|
cve-2026-105937
|
8.7 (v4.0)
|
Apache Pulsar: Missing authorization of the shadow top…
|
Apache Software Foundation
|
Apache Pulsar
|
2026-10-21T18:12:51.420Z |
2026-10-23T21:58:44.482Z |
|
cve-2026-105938
|
2.3 (v4.0)
|
Apache Pulsar: Subscription authorization policies not…
|
Apache Software Foundation
|
Apache Pulsar
|
2026-10-21T18:13:35.337Z |
2026-10-23T21:58:15.976Z |
|
cve-2026-105942
|
7.7 (v4.0)
|
Apache Pulsar: Original principal of proxied requests …
|
Apache Software Foundation
|
Apache Pulsar
|
2026-10-21T18:14:35.996Z |
2026-10-23T21:58:05.657Z |
|
cve-2026-109572
|
7.2 (v4.0)
7.6 (v3.1)
|
Open WebUI 0.8.6 before 0.11.4 Privilege Escalation vi…
|
open-webui
|
open-webui
|
2026-10-12T22:21:48.699Z |
2026-10-23T21:58:00.807Z |
|
cve-2026-109299
|
7.1 (v4.0)
6.5 (v3.1)
|
Open WebUI 0.9.0 before 0.11.4 Denial of Service via R…
|
open-webui
|
open-webui
|
2026-10-12T16:04:57.527Z |
2026-10-23T21:58:00.118Z |
|
cve-2026-109298
|
7.1 (v4.0)
6.5 (v3.1)
|
Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via …
|
open-webui
|
open-webui
|
2026-10-12T16:04:56.895Z |
2026-10-23T21:57:59.402Z |
|
cve-2026-109297
|
7.1 (v4.0)
6.5 (v3.1)
|
Open WebUI 0.11.0 before 0.11.4 Denial of Service via …
|
open-webui
|
open-webui
|
2026-10-12T16:04:56.082Z |
2026-10-23T21:57:58.716Z |
|
cve-2026-109296
|
5.3 (v4.0)
4.3 (v3.1)
|
Open WebUI before 0.11.4 Missing Authorization via Bac…
|
open-webui
|
open-webui
|
2026-10-12T16:04:55.400Z |
2026-10-23T21:57:58.019Z |
|
cve-2026-109295
|
5.3 (v4.0)
4.3 (v3.1)
|
Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowled…
|
open-webui
|
open-webui
|
2026-10-12T16:04:54.739Z |
2026-10-23T21:57:57.327Z |
|
cve-2026-109294
|
7.1 (v4.0)
6.5 (v3.1)
|
Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via …
|
open-webui
|
open-webui
|
2026-10-12T16:04:54.107Z |
2026-10-23T21:57:56.633Z |
|
cve-2026-114266
|
|
ProjectWorlds Advanced Library Management System profi…
|
ProjectWorlds
|
Advanced Library Management System
|
2026-10-21T18:15:13.700Z |
2026-10-23T21:57:56.027Z |
|
cve-2026-109293
|
7.1 (v4.0)
6.5 (v3.1)
|
Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure…
|
open-webui
|
open-webui
|
2026-10-12T16:04:53.493Z |
2026-10-23T21:57:55.938Z |
|
cve-2026-109292
|
7.6 (v4.0)
6.8 (v3.1)
|
Open WebUI 0.6.27 before 0.11.4 Session Token Disclosu…
|
open-webui
|
open-webui
|
2026-10-12T16:04:52.925Z |
2026-10-23T21:57:55.255Z |
|
cve-2026-109291
|
8.5 (v4.0)
7.3 (v3.1)
|
Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citatio…
|
open-webui
|
open-webui
|
2026-10-12T16:04:52.313Z |
2026-10-23T21:57:54.568Z |
|
cve-2026-109290
|
8.4 (v4.0)
8.7 (v3.1)
|
Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview
|
open-webui
|
open-webui
|
2026-10-12T16:04:51.655Z |
2026-10-23T21:57:53.874Z |
|
cve-2026-109289
|
5.3 (v4.0)
6.3 (v3.1)
|
Open WebUI 0.8.8 before 0.11.4 Improper Session Revoca…
|
open-webui
|
open-webui
|
2026-10-12T16:04:51.020Z |
2026-10-23T21:57:53.211Z |
|
cve-2026-109288
|
7.2 (v4.0)
6.4 (v3.1)
|
Open WebUI before 0.11.4 Stored XSS via javascript: UR…
|
open-webui
|
open-webui
|
2026-10-12T16:04:50.352Z |
2026-10-23T21:57:52.520Z |