GHSA-PC6W-59FV-RH23 vulnerabilities

Vulnerabilities for packages: open-webui...

MAL-2025-41541 Malicious code in ciao-webui (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ciao-webui (npm)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2017-6504

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebUI in qBittorrent before 3.3.11 did not set the X-Frame-Options header, which could potentially lead to clickjacking. CVE-2017-6504 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2017-9031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not...

Linux Distros Unpatched Vulnerability : CVE-2017-6503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS. CVE-2017-6503 Note that Nessus relies on the presence of the...

GHSA-7HFW-26VP-JP8M vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-55197 vulnerabilities

Vulnerabilities for packages: open-webui...

Malicious code in gbb-kubernetes-hackfest-webui-dashboard (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in force_webui (npm)

The package forcewebui was found to contain malicious code...

CVE-2025-45150

Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive files via supplying a crafted request...

CVE-2025-45150

Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive files via supplying a crafted request...

PT-2025-31654 · Unknown · Langchain-Chatglm-Webui

Name of the Vulnerable Software and Affected Versions: LangChain-ChatGLM-Webui commit ef829 Description: An insecure permissions issue in LangChain-ChatGLM-Webui commit ef829 allows attackers to view and download sensitive files by submitting a crafted request. Recommendations: Address the insecu...

CVE-2025-45150

Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive files via supplying a crafted request...

LangChain-ChatGLM-Webui 安全漏洞

LangChain-ChatGLM-Webui is an X-D Lab open source AI based on automated quizzing against a local knowledge base. A security vulnerability exists in LangChain-ChatGLM-Webui version ef829, which stems from insecure privileges that allow an attacker to view and download sensitive files via a special...

CVE-2025-45150: Incorrect Permission Assignment for Critical Resource

Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive files via supplying a crafted request...

CVE-2025-45150

The LangChain-ChatGLM-Webui open-source AI software (specifically commit ef829 ) contains a vulnerability involving insecure permissions . This flaw allows an attacker to arbitrarily view and download sensitive files by supplying a crafted request . While a specific patch version is not listed, t...

CVE-2025-31965

Improper access restrictions in HCL BigFix Remote Control Server WebUI versions 10.1.0.0248 and lower allow non-admin users to view unauthorized information on certain web pages...

CVE-2025-31965 HCL BigFix Remote Control is affected by an authorization bypass vulnerability

Improper access restrictions in HCL BigFix Remote Control Server WebUI versions 10.1.0.0248 and lower allow non-admin users to view unauthorized information on certain web pages...

PT-2025-31222 · Hcl · Hcl Bigfix Remote Control Server Webui

Name of the Vulnerable Software and Affected Versions: HCL BigFix Remote Control Server WebUI versions 10.1.0.0248 and lower Description: Improper access restrictions in the WebUI allow non-admin users to view unauthorized information on certain web pages. Recommendations: Update HCL BigFix Remot...