Lucene search
K

8 matches found

NVD
NVD
added 2026/05/15 8:16 p.m.6 views

CVE-2026-44556

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the /responses endpoint in the OpenAI router accepts any authenticated user and forwards requests directly to upstream LLM providers without enforcing per-model access control. While...

7.1CVSS0.00014EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/09 3:52 p.m.1 views

CVE-2026-33266 Apache OpenMeetings: Hardcoded Remember-Me Cookie Encryption Key and Salt

Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie encryption key is set to default value in openmeetings.properties and not being auto-rotated. In case OM admin hasn't changed the default encryption key, an attacker who has stolen a cookie from a...

5.8AI score0.00055EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/09 12:0 a.m.2 views

PT-2025-4717 · Unknown · Surbma | Premium Wp

Name of the Vulnerable Software and Affected Versions: Surbma | Premium WP versions prior to 9.0 Description: The issue is related to improper neutralization of input during web page generation, which allows DOM-Based XSS. This means that an attacker could potentially inject malicious scripts int...

6.5CVSS6.8AI score0.00254EPSS
Exploits0References4
Broadcom
Broadcom
added 2024/05/29 12:0 a.m.7 views

Fabric OS versions prior to v9.0 have default community strings (CVE-2024-5460)

A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature of Brocade Fabric OS versions before v9.0.0 could allow an authenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to hard-coded, default community...

8.1CVSS6.8AI score0.00491EPSS
Exploits1Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 3:32 a.m.1 views

SUSE CVE-2022-2304

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...

5.3CVSS9AI score0.00108EPSS
Exploits1References16
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.2 views

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

7.8CVSS7.4AI score0.01765EPSS
Exploits0References4
OSV
OSV
added 2022/07/03 3:15 p.m.1 views

ALPINE-CVE-2022-2289

Use After Free in GitHub repository vim/vim prior to 9.0...

7.8CVSS6.8AI score0.001EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.3 views

CVE-2022-22815

pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...

6.5CVSS6.7AI score0.00095EPSS
Exploits0References6
Rows per page
Query Builder