Lucene search
+L

9 matches found

OSV
OSV
added 2026/05/15 7:30 p.m.3 views

CVE-2026-44562 Open WebUI: Model Import Overwrites Any Model Without Ownership Check

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the POST /api/v1/models/import endpoint allows users with the workspace.modelsimport permission to overwrite any existing model in the database, regardless of ownership. When an...

6.5CVSS6AI score0.0029EPSS
SaveExploits1References3
vulnersOsv
vulnersOsv
added 2026/05/08 7:52 p.m.8 views

hubzoid (>=0.2.2 <=0.6.0), openwebui-token-tracking (>=0.1.7 <=0.1.10) +1 more potentially affected by CVE-2026-44562 via open-webui (>=0.6.0 <=0.8.8)

open-webui PYPI version =0.6.0, =0.2.2, =0.1.7, =0.1.0, =0.1.5 Source cves: CVE-2026-44562 Source advisory: SNYK:PYTHON-OPENWEBUI-16599157...

6.5CVSS5.7AI score0.0029EPSS
SaveExploits1
vulnersOsv
vulnersOsv
added 2026/05/08 7:52 p.m.6 views

hubzoid (>=0.2.2 <=0.6.0), openwebui-token-tracking (>=0.1.7 <=0.1.10) +1 more potentially affected by CVE-2026-44562 via open-webui (>=0.6.0 <=0.8.8)

open-webui PYPI version =0.6.0, =0.2.2, =0.1.7, =0.1.0, =0.1.5 Source cves: CVE-2026-44562 Source advisory: OSV:GHSA-MQQ6-CQCX-38VG...

6.5CVSS5.7AI score0.0029EPSS
SaveExploits1
Circl
Circl
added 2022/11/10 12:52 a.m.9 views

CVE-2022-44562

creationtimestamp| type| source ---|---|--- 2022-11-10 00:52:30+00:00| seen| https://t.me/cibsecurity/52794 2025-05-01 15:15:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14316...

9.8CVSS8.7AI score0.00571EPSS
SaveExploits0References2
OSV
OSV
added 2022/11/09 9:15 p.m.6 views

CVE-2022-44562

The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation...

9.8CVSS5.8AI score0.00571EPSS
SaveExploits0References2
CVE
CVE
added 2022/11/09 12:0 a.m.60 views

CVE-2022-44562

CVE-2022-44562 involves a serialization/deserialization mismatch in the system framework layer of Huawei HarmonyOS. Affected component: the system framework layer; root cause: incorrect handling of serialized data leading to privilege escalation. Impact: high, including confidentiality, integrity...

9.8CVSS9.3AI score0.00571EPSS
SaveExploits0References2Affected Software1
Saint
Saint
added 2011/01/21 12:0 a.m.366 views

ProFTPD Telnet IAC buffer overflow

Added: 01/21/2011 CVE: CVE-2010-4221 BID: 44562 OSVDB: 68985 Background ProFTPD is free FTP Server software for Unix and Linux platforms. Problem A buffer overflow vulnerability in ProFTPD allows remote attackers to execute arbitrary commands by sending a TELNETIAC escape sequence to the FTP...

10CVSS10AI score0.91303EPSS
SaveExploits10
Packet Storm
Packet Storm
added 2010/11/05 12:0 a.m.480 views

ProFTPD 1.3.2rc3 - 1.3.3b Telnet IAC Buffer Overflow

$Id: proftptelnetiac.rb 10900 2010-11-04 18:12:11Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

7.1CVSS1.6AI score0.07502EPSS
SaveExploits4
Metasploit
Metasploit
added 2010/11/04 6:12 p.m.79 views

ProFTPD 1.3.2rc3 - 1.3.3b Telnet IAC Buffer Overflow (FreeBSD)

This module exploits a stack-based buffer overflow in versions of ProFTPD server between versions 1.3.2rc3 and 1.3.3b. By sending data containing a large number of Telnet IAC commands, an attacker can corrupt memory and execute arbitrary code. This module requires Metasploit:...

10CVSS7.9AI score0.91303EPSS
SaveExploits10
Rows per page
Query Builder