26 matches found
CVE-2024-7038
...
PT-2024-38040
Name of the Vulnerable Software and Affected Versions open-webui version 0.3.8 Description An information disclosure issue exists related to the embedding model update feature under admin settings. When a user updates the model path, the system checks if the file exists and provides different err...
PT-2024-26251
Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue allows an attacker to execute arbitrary SQL commands via the grade parameter in the "/model/update subject routing.php" API endpoint...
PT-2024-26250
Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue allows an attacker to execute arbitrary SQL commands via the name parameter in the "/model/update classroom.php" API endpoint. Recommendations...
PT-2022-16063 · Openfga · Openfga
Name of the Vulnerable Software and Affected Versions: OpenFGA version 0.3.0 Description: OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. During an internal security assessment, it was discovered that OpenFGA is vulnerable to authorization bypas...