39461 matches found
CVE-2026-109298
Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a regex engine that expands nested counted repetition unbounded at compile time and caches the result. Authenticated users can have the model call grepknowledgefiles with short...
CVE-2026-85965 Use-after-free in Progress MarkLogic Server JavaScript engine integration
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability...
EUVD-2026-97557
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability...
CVE-2026-85965
Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are affected by a Use-after-free memory-safety defect within the JavaScript engine integration . This vulnerability could lead to memory corruption , controlled process failure , or server instability . No specific explo...
CVE-2026-109298
The Open WebUI software (versions 0.11.0 before 0.11.4) is vulnerable to memory exhaustion due to how it handles user-chosen grep patterns in its knowledge and chat file search tools. The underlying cause is a regex engine that expands nested counted repetitions unbounded at compile time and cach...
EUVD-2026-97600
Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a regex engine that expands nested counted repetition unbounded at compile time and caches the result. Authenticated users can have the model call grepknowledgefiles with short...
SUSE CVE-2026-107815
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...
tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine
A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...
Moderate: Red Hat Security Advisory: tftp security update
An update for tftp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
Exploit for Missing Authorization in Mongodb
CVE-2026-13078 POC Original PoC coded and developed by Ad3M...
EulerOS 2.0 SP13 : docker-engine (EulerOS-SA-2026-4041)
According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine...
EulerOS 2.0 SP13 : docker-engine (EulerOS-SA-2026-4132)
According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine...
EulerOS 2.0 SP11 : docker-engine (EulerOS-SA-2026-4223)
According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privileg...
EulerOS 2.0 SP11 : docker-engine (EulerOS-SA-2026-4314)
According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privileg...
Moderate: tftp security update
The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...
PT-2026-110802
šØ CVE-2026-85965 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability. š@cveNotify...
Rocky Linux 8 [CIQ] Security Update: tftp / tftp-debuginfo / tftp-debugsource / tftp-server / etc (crlsa-2026_78952)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202678952 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly fro...
CVE-2026-85965: Use After Free
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability...
CVE-2026-108824: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been...
PT-2026-110715
Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.11.0 through 0.11.3 Description The software uses a regex engine for its knowledge and chat file search tools that expands nested counted repetition unbounded at compile time and caches the result. Authenticated users can...