CVE-2026-54012

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI lets a user who can create, update, or import workspace models store arbitrary meta.knowledge entries on their model without checking whether they own or can read the...

SUSE CVE-2018-12713

GIMP through 2.10.2 makes ggettmpdir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimpwriteandreadfile function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was...

PT-2021-16546

Name of the Vulnerable Software and Affected Versions: Galaxy Themes versions prior to 5.2.00.1215 Description: The issue allows local attackers to read and write private file directories of the Galaxy Themes application without permission. This is achieved by hijacking an empty PendingIntent...

PT-2014-8856

Name of the Vulnerable Software and Affected Versions FileField module versions 6.x-3.x before 6.x-3.13 Description The issue allows remote authenticated users with permission to create or edit content to read private files by attaching an uploaded file, due to improper permission checks to view...