23287 matches found
Server-side Request Forgery (SSRF)
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the processpictureurl function. An attacker can access internal network resources and exfiltrate sensitive data by submitting a crafted OAuth profile image URL that redirec...
CVE-2026-27429
creationtimestamp| type| source ---|---|--- 2026-06-17 14:10:14+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moiij5wfno2b...
CVE-2026-49076
creationtimestamp| type| source ---|---|--- 2026-06-17 13:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moihqde3tk2z...
CVE-2026-42385
Unauthenticated Cross Site Scripting XSS in Profile Builder Pro = 3.15.0 versions...
CVE-2026-10641 Out-of-bounds write in Bluetooth HFP Hands-Free CIND indicator parsing (cind_handle_values)
Zephyr's Bluetooth Classic Hands-Free Profile HFP Hands-Free role parser subsys/bluetooth/host/classic/hfphf.c contains an out-of-bounds write. During Service Level Connection setup the HF sends AT+CIND=? and parses the AG's +CIND: response in cindhandle, which assigns a per-entry counter index a...
CVE-2026-10641
Zephyr Bluetooth Classic HFP HF CIND parser (subsys/bluetooth/host/classic/hfp_hf.c) contains an out-of-bounds write during +CIND=?/+CIND: handling. cind_handle_values() writes hf-ind_table[index] = i without verifying index is within the 20-element int8_t ind_table[]. A remote attacker could sen...
CVE-2026-46768
creationtimestamp| type| source ---|---|--- 2026-06-17 11:55:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moiaxrr3n52v...
firefox: thunderbird: Sandbox escape in the Profile Backup component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Profile Backup component...
GHSA-7XH3-MHG9-JCW8
creationtimestamp| type| source ---|---|--- 2026-06-17 10:36:55+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3moi4lqjxxk2f...
firefox: thunderbird: Sandbox escape in the Profile Backup component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Profile Backup component...
CVE-2026-0092
creationtimestamp| type| source ---|---|--- 2026-06-17 10:05:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moi2tivfih2n 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen|...
firefox: thunderbird: Sandbox escape in the Profile Backup component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Profile Backup component...
CVE-2026-28575
creationtimestamp| type| source ---|---|--- 2026-06-17 10:01:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moi2kk2oaa2f 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen|...
CVE-2026-42385
The CVE concerns WordPress Profile Builder Pro plugin, versions ≤ 3.15.0, with an Unauthenticated Cross Site Scripting (XSS) vulnerability. The issue affects the plugin’s handling of input in a way that allows an attacker without authentication to inject script resulting in client-side execution....
CVE-2026-42385 WordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Profile Builder Pro = 3.15.0 versions...
CVE-2026-0068
creationtimestamp| type| source ---|---|--- 2026-06-17 09:36:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohz6ybpqf2j 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen|...
CVE-2026-28587
creationtimestamp| type| source ---|---|--- 2026-06-17 09:29:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohysbwee72z 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen|...
CVE-2026-0082
creationtimestamp| type| source ---|---|--- 2026-06-17 09:20:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mohydjy5ah2v 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622...
firefox: thunderbird: Sandbox escape in the Profile Backup component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Profile Backup component...