Lucene search
+L

4 matches found

EUVD
EUVD
•added 2026/09/10 3:10 p.m.•18 views

EUVD-2026-75178

Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint...

4.3CVSS5.8AI score0.00372EPSS
SaveExploits1References5
Mend
Mend
•added 2026/09/09 9:24 p.m.•10 views

CVE-2026-87994

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, the channel branch of chatcompletion in backend/openwebui/main.py checked channel write access and channel membership for a supplied messageid but did not verify that the calling user...

5.3CVSS5.8AI score0.00372EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/07 12:00 a.m.•7 views

CVE-2021-20375: Undefined Security Weakness

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user due to improper access controls. IBM X-Force ID: 195567...

6.5CVSS5.8AI score0.00799EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/10/06 12:00 a.m.•13 views

CVE-2021-20375

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user due to improper access controls. IBM X-Force ID: 195567...

6.5CVSS6.6AI score0.00799EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder