EUVD-2025-208453

A security vulnerability has been detected in open-webui up to 0.6.16. Affected is an unknown function of the file backend/startwindows.bat of the component JWT Key Handler. Such manipulation of the argument WEBUISECRETKEY leads to insufficiently random values. It is possible to launch the attack...

CVE-2022-0339

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

EUVD-2022-15550

Malicious code in bioql PyPI...

EUVD-2022-0034

Malicious code in bioql PyPI...

EUVD-2022-0033

Malicious code in bioql PyPI...

CVE-2023-25306

MultiMC Launcher = 0.6.16 is vulnerable to Directory Traversal...

CVE-2023-25306

MultiMC Launcher = 0.6.16 is vulnerable to Directory Traversal...

SUSE CVE-2022-43507

Improper buffer restrictions in the IntelR QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable escalation of privilege via network access...

Incorrect Authorization in calibreweb

calibreweb prior to version 0.6.16 contains an Incorrect Authorization vulnerability...

GHSA-VGMW-9CWW-QQ99 Incorrect Authorization in calibreweb

calibreweb prior to version 0.6.16 contains an Incorrect Authorization vulnerability...

PYSEC-2022-23

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

PYSEC-2022-22

Improper Access Control in Pypi calibreweb prior to 0.6.16...

PT-2022-13115 · Unknown · Calibre-Web

Name of the Vulnerable Software and Affected Versions: calibreweb versions prior to 0.6.16 Description: The issue is related to a Server-Side Request Forgery SSRF in calibreweb. This allows an attacker to forge requests from the server to other services. No information is provided about the...

Cross-site Scripting in calibreweb

calibreweb prior to version 0.6.16 contains a cross-site scripting vulnerability...

GHSA-H56G-V4VP-Q9Q6 Cross-site Scripting in calibreweb

calibreweb prior to version 0.6.16 contains a cross-site scripting vulnerability...

PHP Helpdesk 0.6.16 Index.PHP Local File Include Vulnerability

No description provided by source. source: www.securityfocus.com/bid/26318/info PHP Helpdesk is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. PHP...

phphelpdesk Multiple vulnerabilities

phphelpdesk version 0.6.16 latest http://phphelpdesk.sourceforge.net phphelpdesk Multiple vulnerabilities PhpHelpDesk is a popular solution for people looking for a way to manage their helpdesk tickets. Presently there exists 2 vulnerabilites that affect the inegrity of systems who run the...

phphelpdesk-lfisql.txt

phphelpdesk version 0.6.16 latest http://phphelpdesk.sourceforge.net phphelpdesk Multiple vulnerabilities PhpHelpDesk is a popular solution for people looking for a way to manage their helpdesk tickets. Presently there exists 2 vulnerabilites that affect the inegrity of systems who run the...