4981 matches found
CVE-2026-102329
Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...
EUVD-2026-89395
Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...
CVE-2026-102329
A Cross-site scripting (XSS) vulnerability exists in the WebUI of Google Chrome prior to version 154.0.8037.92 . This flaw allows a remote attacker to bypass the web origin policy to access a privileged page by navigating the user to a crafted HTML page . No specific exploit code or in-the-wild e...
CVE-2026-102329
Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...
PT-2026-102946
Name of the Vulnerable Software and Affected Versions Fireware OS affected versions not specified Description A path traversal issue in the WebUI management agent allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending a specially crafted managemen...
CVE-2026-102329: Improper Neutralization of Input During Web Page Generation
Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...
PT-2026-102861
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description Cross-site scripting in the WebUI allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can intera...
CVE-2026-81726 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-HQJ7-PHWP-C3FP vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-8MGP-746C-J5XP vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-81726 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-8MGP-746C-J5XP vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-HQJ7-PHWP-C3FP vulnerabilities
Vulnerabilities for packages: open-webui...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted inputs in the WebUI of Google Chrome prior to version 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape through malicious network traffic. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Missing authorization in the WebUI of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy through a crafted HTML page. Chromium security severity: High...
GHSA-GJV8-XP57-G29C vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-J934-XHV5-FG8F vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-85999 vulnerabilities
Vulnerabilities for packages: open-webui...