|
cve-2026-109287
|
5.3 (v4.0)
4.3 (v3.1)
|
Open WebUI 0.9.6 before 0.11.4 Information Disclosure …
|
open-webui
|
open-webui
|
2026-10-12T16:04:49.037Z |
2026-10-23T21:57:51.842Z |
|
cve-2026-109286
|
8.6 (v4.0)
8.1 (v3.1)
|
Open WebUI 0.7.0 before 0.11.4 Session Token Theft via…
|
open-webui
|
open-webui
|
2026-10-12T16:04:48.429Z |
2026-10-23T21:57:51.179Z |
|
cve-2026-109285
|
2.3 (v4.0)
5 (v3.1)
|
Open WebUI 0.6.0 before 0.11.4 Improper Access Control…
|
open-webui
|
open-webui
|
2026-10-12T16:04:47.776Z |
2026-10-23T21:57:50.570Z |
|
cve-2026-109284
|
5.3 (v4.0)
4.3 (v3.1)
|
Open WebUI 0.11.0 before 0.11.4 Improper Authorization…
|
open-webui
|
open-webui
|
2026-10-12T16:04:46.613Z |
2026-10-23T21:57:49.889Z |
|
cve-2026-109283
|
5.3 (v4.0)
5.4 (v3.1)
|
Open WebUI 0.11.1 before 0.11.4 Authorization Bypass v…
|
open-webui
|
open-webui
|
2026-10-12T16:04:46.013Z |
2026-10-23T21:57:49.217Z |
|
cve-2026-105944
|
10 (v4.0)
|
Apache Pulsar Manager: Missing authentication and auth…
|
Apache Software Foundation
|
Apache Pulsar Manager
|
2026-10-21T18:17:37.844Z |
2026-10-23T21:57:46.976Z |
|
cve-2026-105945
|
7.7 (v4.0)
|
Apache Pulsar: Improper Validation of Package Name Com…
|
Apache Software Foundation
|
Apache Pulsar
|
2026-10-21T18:18:26.687Z |
2026-10-23T21:57:38.167Z |
|
cve-2026-78118
|
7 (v3.1)
|
Race condition on kernel wait queues: unlocked z_waitq…
|
zephyrproject
|
zephyr
|
2026-10-21T18:19:32.200Z |
2026-10-23T21:28:10.701Z |
|
cve-2026-78119
|
6.3 (v3.1)
|
Out-of-bounds write in the Nuvoton NPCX eSPI Target-At…
|
zephyrproject
|
zephyr
|
2026-10-21T18:19:33.366Z |
2026-10-23T21:27:51.509Z |
|
cve-2026-19947
|
5.3 (v3.1)
|
Missing kernel object permission check in devmux sysca…
|
zephyrproject
|
zephyr
|
2026-10-21T18:19:35.637Z |
2026-10-23T21:23:27.801Z |
|
cve-2026-111804
|
8.2 (v3.1)
8.8 (v4.0)
|
Apache Traffic Server: wasm plugin has a use-after-fre…
|
Apache Software Foundation
|
Apache Traffic Server
|
2026-10-21T18:21:32.055Z |
2026-10-23T21:23:16.760Z |
|
cve-2026-111816
|
9.3 (v3.1)
9.2 (v4.0)
|
Apache Traffic Server: A malformed 302 response bypass…
|
Apache Software Foundation
|
Apache Traffic Server
|
2026-10-21T18:26:32.566Z |
2026-10-23T21:22:57.204Z |
|
cve-2026-111805
|
8.6 (v3.1)
7.7 (v4.0)
|
Apache Traffic Server: HTTP/2 Content-Length truncatio…
|
Apache Software Foundation
|
Apache Traffic Server
|
2026-10-21T19:10:46.319Z |
2026-10-23T21:22:42.961Z |
|
cve-2026-111808
|
8.6 (v3.1)
7.7 (v4.0)
|
Apache Traffic Server: HTTP/2 DATA frame padding under…
|
Apache Software Foundation
|
Apache Traffic Server
|
2026-10-21T19:11:59.516Z |
2026-10-23T21:22:09.150Z |
|
cve-2026-111810
|
7.5 (v3.1)
8.7 (v4.0)
|
Apache Traffic Server: Unthrottled per-header diagnost…
|
Apache Software Foundation
|
Apache Traffic Server
|
2026-10-21T19:14:50.479Z |
2026-10-23T21:21:35.176Z |
|
cve-2026-111817
|
5.3 (v3.1)
6.9 (v4.0)
|
Apache Traffic Server: Dropping chunked trailers stall…
|
Apache Software Foundation
|
Apache Traffic Server
|
2026-10-21T19:20:00.515Z |
2026-10-23T21:21:06.850Z |
|
cve-2026-112381
|
5.9 (v3.1)
8.2 (v4.0)
|
Apache Traffic Server: Nullptr dereference in net_writ…
|
Apache Software Foundation
|
Apache Traffic Server
|
2026-10-21T19:20:38.885Z |
2026-10-23T21:20:44.000Z |
|
cve-2026-114375
|
|
leomoon-studios wiki-go Files Rename API files.go Rena…
|
leomoon-studios
|
wiki-go
|
2026-10-21T19:45:20.856Z |
2026-10-23T21:20:14.859Z |
|
cve-2026-114141
|
|
toml-node: Quadratic-complexity DoS via many array-of-…
|
BinaryMuse
|
toml-node
|
2026-10-21T20:25:36.396Z |
2026-10-23T21:20:03.858Z |
|
cve-2026-114378
|
|
itsourcecode Online Cake Ordering System deleteproduct…
|
itsourcecode
|
Online Cake Ordering System
|
2026-10-21T20:30:18.507Z |
2026-10-23T21:19:18.865Z |
|
cve-2026-96643
|
|
Pillow: PNG eXIf chunk makes EXIF parsing run in quadr…
|
python-pillow
|
Pillow
|
2026-10-21T20:56:26.344Z |
2026-10-23T21:19:12.901Z |
|
cve-2026-96637
|
|
Pillow: Decompression bomb check bypass in SpiderImage…
|
python-pillow
|
Pillow
|
2026-10-21T21:01:20.249Z |
2026-10-23T21:18:59.858Z |
|
cve-2026-114381
|
|
itsourcecode Online Cake Ordering System orderdetail.p…
|
itsourcecode
|
Online Cake Ordering System
|
2026-10-21T21:15:17.882Z |
2026-10-23T21:18:36.060Z |
|
cve-2026-114508
|
|
Laravel relationship inclusion can trigger unauthorize…
|
laravel
|
framework
|
2026-10-21T21:45:31.465Z |
2026-10-23T21:18:11.415Z |
|
cve-2026-114384
|
|
itsourcecode Online Cake Ordering System transactionsa…
|
itsourcecode
|
Online Cake Ordering System
|
2026-10-21T22:00:18.707Z |
2026-10-23T21:17:46.796Z |
|
cve-2026-114441
|
|
oretnom23 php-travel-agency-system update.php sql injection
|
oretnom23
|
php-travel-agency-system
|
2026-10-21T22:45:18.510Z |
2026-10-23T21:17:17.273Z |
|
cve-2026-114576
|
|
Linksys RE6250 Web Management strcmp random values
|
Linksys
|
RE6250
|
2026-10-22T01:30:21.675Z |
2026-10-23T21:16:58.599Z |
|
cve-2017-20289
|
7.7 (v4.0)
7.5 (v3.1)
|
Broadstreet Ad Widget WordPress Plugin < 2.12.0 Local …
|
Broadstreet
|
Ad Widget
|
2026-10-22T10:57:23.974Z |
2026-10-23T21:16:32.796Z |
|
cve-2019-25778
|
8.8 (v4.0)
8.2 (v3.1)
|
SeaCMS 8.7 SQL Injection via comment/api/index.php rli…
|
SeaCMS
|
SeaCMS
|
2026-10-22T10:57:26.733Z |
2026-10-23T21:16:06.927Z |
|
cve-2021-48014
|
9.3 (v4.0)
9.8 (v3.1)
|
FineReport 9.0 Unauthenticated Path Traversal File Wri…
|
FanRuan
|
FineReport
|
2026-10-22T10:57:29.782Z |
2026-10-23T21:15:46.961Z |