5241 matches found
CVE-2025-12487
oobabooga text-generation-webui trustremotecode Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this...
CVE-2025-12487 oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability
oobabooga text-generation-webui trustremotecode Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this...
CVE-2025-12488 oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability
oobabooga text-generation-webui trustremotecode Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this...
CVE-2025-12488
The CVE-2025-12488 issue affects oobabooga text-generation-webui. The vulnerability is caused by improper validation of the trust_remote_code argument in the /load endpoint, allowing an attacker to load a model with untrusted input and execute arbitrary code in the service account context. Auth i...
CVE-2025-12488 oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability
oobabooga text-generation-webui trustremotecode Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this...
CVE-2025-6176 vulnerabilities
Vulnerabilities for packages: mitmproxy...
CVE-2025-6176 vulnerabilities
Vulnerabilities for packages: pgadmin4, superset, nemo, mitmproxy...
CVE-2025-12488: Reliance on Untrusted Inputs in a Security Decision
oobabooga text-generation-webui trustremotecode Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this...
CVE-2025-12487: Reliance on Untrusted Inputs in a Security Decision
oobabooga text-generation-webui trustremotecode Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this...
CVE-2025-52602: Exposure of Private Personal Information to an Unauthorized Actor
HCL BigFix Query is affected by a sensitive information disclosure in the WebUI Query application. An HTTP GET endpoint request returns discoverable responses that may disclose: group names, active user names or IDs. An attacker can use that information to target individuals with phishing or...
GHSA-7F5H-V6XP-FCQ8 vulnerabilities
Vulnerabilities for packages: kserve, airflow-core, open-webui, airflow, mlflow, reflex, k8s-sidecar, nemo...
PT-2025-44566
Name of the Vulnerable Software and Affected Versions oobabooga text-generation-webui versions prior to 2.5 Description The software is susceptible to a remote code execution issue stemming from insufficient validation of user-supplied input. Specifically, the trust remote code parameter within t...
CVE-2025-62708 vulnerabilities
Vulnerabilities for packages: open-webui, nemo...
GHSA-VR63-X8VC-M265 vulnerabilities
Vulnerabilities for packages: open-webui, nemo...
CVE-2025-62707 vulnerabilities
Vulnerabilities for packages: open-webui, nemo...
GHSA-JFX9-29X2-RV3J vulnerabilities
Vulnerabilities for packages: open-webui, nemo...
CVE-2025-62707 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2025-62708 vulnerabilities
Vulnerabilities for packages: open-webui...