GHSA-WGVP-VG3V-2XQ3 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-15583

CVE-2025-15583 affects detronetdip E-commerce 1.0.0, specifically the get_safe_value function in util/function.php. The vulnerability induces cross-site scripting and can be triggered remotely; public exploit appears to be available. The description provides no details on a fix or mitigations, an...

CVE-2026-22370

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Marveland marveland allows PHP Local File Inclusion.This issue affects Marveland: from n/a through = 1.3.0...

CVE-2025-68349

creationtimestamp| type| source ---|---|--- 2026-02-20 14:25:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mfccsjc2s322 2026-03-06 13:10:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgff4w63em24 2026-03-19 00:00:00+00:00| seen|...

CVE-2026-25315

creationtimestamp| type| source ---|---|--- 2026-02-20 12:47:09+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mfc5cvcn7d2h 2026-02-20 17:14:19+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mfcman57el2m 2026-02-21 00:05:09+00:00| seen|...

CVE-2026-27322

Not used...

CVE-2017-4519

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2017-4166

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2026-2689

creationtimestamp| type| source ---|---|--- 2026-02-20 04:20:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfbayertpa2u...

CVE-2026-27052

creationtimestamp| type| source ---|---|--- 2026-02-19 20:16:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfafws2iq32k...

CVE-2025-13851

creationtimestamp| type| source ---|---|--- 2026-02-19 18:17:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfa7dfmbka2f 2026-02-20 16:24:56+00:00| seen| https://infosec.exchange/ap/users/116075764941463905/statuses/116103874182500259 2026-05-21 02:13:28+00:00| seen|...

CVE-2026-26049

creationtimestamp| type| source ---|---|--- 2026-02-19 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-03...

BELL-CVE-2026-23114

Bulletin has no description...

CVE-2025-71233

A flaw was found in the Linux kernel. A local user with administrative privileges can trigger a NULL pointer dereference, a type of memory corruption vulnerability, in the PCI endpoint configfs code. This occurs when a user removes a driver directory before an asynchronously created sub-group...

CVE-2013-5629

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: A public posting on 20130831 referenced this ID for a specific issue, but that issue had not been assigned this ID by any CNA. Notes: The posting will later have IDs assigned in accordance with CVE content decisions...

CVE-2013-5621

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: A public posting on 20130831 referenced this ID for a specific issue, but that issue had not been assigned this ID by any CNA. Notes: The posting will later have IDs assigned in accordance with CVE content decisions...

CVE-2013-3817

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none...

CVE-2026-23222

In the Linux kernel, the following vulnerability has been resolved: crypto: omap - Allocate OMAPCRYPTOFORCECOPY scatterlists correctly The existing allocation of scatterlists in omapcryptocopysglists was allocating an array of scatterlist pointers, not scatterlist objects, resulting in a 4x too...

CVE-2025-70830

creationtimestamp| type| source ---|---|--- 2026-02-17 16:22:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2xwolu4k2c...

CVE-2026-23157

A deadlock vulnerability was found in the Linux kernel's Btrfs filesystem when used with cgroups that have low memory/dirty page limits. Btrfs has an internal 32MiB threshold before writing back btree metadata, but if a cgroup's dirty limit is lower e.g., 16MB, processes can become stuck...