21 matches found
CVE-2026-22691
creationtimestamp| type| source ---|---|--- 2026-01-24 21:26:01+00:00| seen| https://gist.github.com/alon710/e674a091497c87216f8bbb1417187e78 2026-01-24 21:26:10+00:00| seen| https://gist.github.com/alon710/e5a93d732ac6484870ad550d8066ea64 2026-01-24 22:41:24+00:00| seen|...
CVE-2026-22691 vulnerabilities
Vulnerabilities for packages: open-webui...
DEBIAN-CVE-2026-22691
pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for malformed startxref. An attacker who uses this vulnerability can craft a PDF which leads to possibly long runtimes for invalid startxref entries. When rebuilding the cross-referen...
CVE-2026-22691
pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for malformed startxref. An attacker who uses this vulnerability can craft a PDF which leads to possibly long runtimes for invalid startxref entries. When rebuilding the cross-referen...
Linux Distros Unpatched Vulnerability : CVE-2026-22691
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for malformed startxref. An attacker who uses...
01os (>=0.0.5 <=0.0.13), 3m (>=0.1.0 <=0.1.3) +2084 more potentially affected by CVE-2026-22691 via pypdf (>=6.0.0 <=6.5.0)
pypdf PYPI version =6.0.0, =0.0.5, =0.1.0, =0.0.1, =0.2.0, =0.4.0, =0.3.0, =0.3.0, =0.1.1, =0.1.0, =0.0.2, =0.2.0, =1.2.27, =0.1.0, =0.6.0, =0.7.3 and more Source cves: CVE-2026-22691 Source advisory: SNYK:PYTHON-PYPDF-14912439...
01os (>=0.0.5 <=0.0.13), 3m (>=0.1.0 <=0.1.3) +2545 more potentially affected by CVE-2026-22691 via pypdf (>=3.10.0 <=6.5.0)
pypdf PYPI version =3.10.0, =0.0.5, =0.1.0, =0.0.1, =0.2.0, =0.4.0, =0.3.0, =0.3.0, =0.1.1, =0.1.0, =0.0.2, =0.2.0, =1.2.27, =3.0.145 and more Source cves: CVE-2026-22691 Source advisory: OSV:GHSA-4F6G-68PF-7VHV...
CVE-2025-22691
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel WP Travel wp-travel allows SQL Injection.This issue affects WP Travel: from n/a through = 10.1.3...
CVE-2025-22691
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel WP Travel wp-travel allows SQL Injection.This issue affects WP Travel: from n/a through = 10.1.3...
CVE-2025-22691
creationtimestamp| type| source ---|---|--- 2025-02-03 15:10:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113940590264088785 2025-02-03 15:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbtkpu65d2j...
CVE-2025-22691
CVE-2025-22691 is a SQL injection vulnerability in the WordPress plugin WP Travel . The issue arises from improper neutralization of input in SQL commands, affecting versions up to and including 10.1.0 (and referenced advisories extend to 10.1.3). The CVSS-derived base impact in the initial recor...
CVE-2025-22691 WordPress WP Travel plugin <= 10.1.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel WP Travel wp-travel allows SQL Injection.This issue affects WP Travel: from n/a through = 10.1.3...
CVE-2023-22691
CVE-2023-22691 affects the WordPress plugin Category Specific RSS feed Subscription (Tips and Tricks HQ) <= v2.1. A CSRF vulnerability exists in settings/credential-related actions due to missing CSRF checks, enabling unauthenticated attackers to induce actions on behalf of admins. Patch sourc...
CVE-2023-22691 WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.1 versions...
CVE-2023-22691 WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.1 versions...
WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software Category Specific RSS feed Subscription Type Plugin Vulnerable versions = v2.1 Fixed in v2.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-22691 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID aed3a951c25f Credi...
CVE-2021-22691
CVE-2021-22691 entry is rejected/not used and does not represent an active vulnerability.
CVE-2022-22691
creationtimestamp| type| source ---|---|--- 2022-01-18 20:25:08+00:00| seen| https://t.me/cibsecurity/35732...
CVE-2022-22691
The password reset component deployed within Umbraco uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sent to Umbraco users when so that it points to the attackers server thereby disclosing the password reset...