176 matches found
CVE-2020-7116
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system...
CVE-2025-65958 Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/web
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Server-Side Request Forgery SSRF vulnerability in Open WebUI allows any authenticated user to force the server to make HTTP requests to arbitrary URLs. This can be exploited to...
Access Control Bypass
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Access Control Bypass via the /api/tasks/stop/taskid endpoint. An attacker can enumerate tasks running by other users and use taskid to terminate any tasks running on the server. Remediation Upgrade open-webu...
CVE-2025-65106 vulnerabilities
Vulnerabilities for packages: open-webui...
EUVD-2025-38257
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prompt body is...
EUVD-2018-12287
Malware in sbrugna...
EUVD-2017-16708
Malware in sbrugna...
EUVD-2015-4162
Malware in sbrugna...
EUVD-2019-14925
Malware in sbrugna...
EUVD-2018-17817
Malware in sbrugna...
EUVD-2018-5923
Malware in sbrugna...
EUVD-2019-4220
Malware in sbrugna...
EUVD-2019-15169
Malware in sbrugna...
EUVD-2019-16552
Malware in sbrugna...
EUVD-2018-5925
Malware in sbrugna...
EUVD-2025-16137
Malicious code in bioql PyPI...
EUVD-2025-12363
Malicious code in bioql PyPI...
EUVD-2025-6959
Malicious code in bioql PyPI...