The vulnerability of the Open WebUI web interface, related to the lack of authentication, allows a perpetrator to trigger a service failure.

The vulnerability in the Open WebUI web interface is related to the lack of authentication when processing endpoints like /api/tasks and /api/tasks/stop/taskid. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted requests...

The vulnerability of the PDF-generation function in the Open WebUI web interface allows a attacker to perform an SSRF attack.

The vulnerability of the PDF file generation function in the Open WebUI web interface is related to insufficient validation of requests at the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

Vulnerability of the _process_picture_url() function (backend/open_webui/utils/oauth.py) in the Open WebUI AI-based web interface, which allows a hacker to perform an SSRF attack

The vulnerability of the processpictureurl function backend/openwebui/utils/oauth.py in the Open WebUI AI-based web interface is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...

The vulnerability of the Metricbeat monitoring tool, related to uncontrolled memory distribution, allows a attacker to trigger a service failure.

The vulnerability of the Metricbeat monitoring tool is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the network routing implementation software on Unix-like systems, related to the handling of the zero pointer, allows a hacker to cause a service failure.

The vulnerability of the FRRouting software implementation for Unix-like systems relates to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the aiohttp HTTP client, related to the lack of protection for service data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the aiohttp HTTP client is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the Open WebUI web interface, related to the manipulation of cross-site requests, allows a perpetrator to perform a CSRF attack or cause a service failure.

The vulnerability of the Open WebUI web interface is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack or cause a service failure...

The vulnerability of the aiohttp HTTP client, related to deficiencies in request processing, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the aiohttp HTTP client is related to deficiencies in request processing. Exploiting this vulnerability allows an attacker to send hidden HTTP requests remotely HTTP Request Smuggling attack...

The vulnerability in the set of libraries for the Erlang programming language relates to incorrect restrictions on the path name to the restricted access directory. This allows a intruder to gain unauthorized access to protected information.

The vulnerability in the set of libraries for the Erlang programming language relates to incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the modular interface between web servers and web applications in Rack, related to the lack of protective measures for the web page structure, allows attackers to execute arbitrary code.

The vulnerability of the modular interface between web servers and Rack web applications is related to the lack of security measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the aiohttp HTTP client, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the aiohttp HTTP client is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the Go programming language, related to errors in type mixing, allows attackers to execute arbitrary code.

The vulnerability of the Go programming language is related to type mixing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Go programming language, which comes with unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the Go programming language is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the Golang programming language, related to deficiencies in authentication mechanisms, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Go programming language is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the DNS proxy server of the PAN-OS operating system allows a perpetrator to cause a service failure or execute arbitrary code.

The vulnerability of the DNS proxy server of the PAN-OS operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

The vulnerability of the application software interface of the Glances monitoring tool arises from the use of an untrusted inter-domain policy file, which allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the application programming interface of the Glances monitoring tool is related to the use of an untrusted interdomain policy file. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Go programming language, related to the lack of measures taken to protect web page structures, allows attackers to execute arbitrary code.

The vulnerability of the Go programming language is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the JOSE library Authlib implementation for OAuth and OpenID Connect servers lies in the exposure of information due to inconsistencies, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the JOSE library Authlib implementation for OAuth and OpenID Connect servers is related to the disclosure of information due to incompatibility. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the activesupport component in the Ruby on Rails software framework allows a hacker to trigger a service failure.

The vulnerability of the activesupport component in the Ruby on Rails software framework is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the activesupport component in the Ruby on Rails software framework allows a hacker to trigger a service failure.

The vulnerability of the activesupport component in the Ruby on Rails software framework is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Go programming language lies in the incorrect definition of the link before accessing a file, which allows attackers to escalate their privileges.

The vulnerability of the Go programming language is related to the incorrect definition of the reference before accessing a file. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the PDF processing library PyPDF2, related to excessive iteration, allows a hacker to trigger a service failure.

The vulnerability of the PyPDF2 library for processing PDF files is related to excessive iteration. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the get_status() function in the Open WebUI web interface allows a hacker to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the getstatus function in the Open WebUI web interface is related to the lack of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...

The vulnerability of the bson_validate() function in the MongoDB database management system allows a hacker to trigger a service failure.

The vulnerability of the bsonvalidate function in the MongoDB database management system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the formPPPoESetup function in the goform/formPPPoESetup file of the POST Request Handler component of the Edimax BR-6675nD wireless signal amplifiers’ microprogramming system, which allows a hacker to cause a service failure.

The vulnerability of the formPPPoESetup function in the goform/formPPPoESetup file of the POST Request Handler component of the wireless signal amplifiers’ microprogramming system Edimax BR-6675nD is related to the issue of the operation exceeding the buffer boundaries in memory when processing t...

The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, stems from authentication procedures that have flaws. This allows attackers to enhance their privileges, gain read access to data, and execute arbitrary code.

The vulnerability of the Prisma Access Agent, a user remote access agent, relates to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges, gain read access to data, and execute arbitrary code...

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App lies in the fact that the operation is performed outside the buffer in memory. This allows an attacker to execute a “man-in-the-middle” attack and execute arbitrary code.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack an...

The vulnerability of the Open WebUI web interface, based on artificial intelligence, arises from the lack of permission checks. This allows attackers to gain read access, modify data, enhance their privileges, and execute arbitrary code.

The vulnerability of the Open WebUI web interface is related to the lack of permission checking for workspace.tools. Exploiting this vulnerability allows a malicious actor to gain read access, modify data, elevate their privileges, and execute arbitrary code by sending a specially crafted POST...

The vulnerability in the Open WebUI web interface, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks (XSS).

The vulnerability of the Open WebUI web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS using a specially created URL address...

The vulnerability of the Gimp image processing library, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Gimp image processing library is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Squid proxy server, related to improper blocking of resources, allows a violator to trigger a service failure.

The vulnerability of the Squid proxy server is related to improper blocking of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Active Storage library for connecting cloud and local files to Rails applications involves an incorrect path name limitation for the restricted access directory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Active Storage library for connecting cloud and local files to Rails applications is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected...

The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, stems from insufficient protection of operational data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Prisma Access Agent, a user remote access agent, relates to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the formwlencrypt24g function in the goform/formwlencrypt24g file of the POST Request Handler component of the microprogramming system for wireless signal amplifiers of the Edimax EW-7438RPn Mini device, which allows a hacker to cause a service failure.

The vulnerability of the formwlencrypt24g function in the goform/formwlencrypt24g file of the POST Request Handler component of the microprogramming system for wireless signal amplifiers from Edimax EW-7438RPn Mini is related to the execution of an operation outside the buffer in memory when...

The vulnerability of the frmL7ImForm function in the goform/L7Im microprogramming system for Tenda F456 allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the frmL7ImForm function in the goform/L7Im microprogramming system for Tenda F456 is related to the execution of an operation outside the buffer in memory when processing the page parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or...

The vulnerability of the formPPTPSetup function in the goform/formPPTPSetup file of the POST Request Handler component of the wireless signal amplifiers’ microprogramming system, Edimax BR-6675nD, allows a hacker to trigger a service failure.

The vulnerability of the formPPTPSetup function in the goform/formPPTPSetup file of the POST Request Handler component of the wireless signal amplifiers’ microprogramming system, Edimax BR-6675nD, is related to the operation of the function beyond the buffer in memory when processing the...

The vulnerability of the Data Protection Module of the Endpoint DLP agent for remote access to corporate resources and Prisma Access Agent applications allows a hacker to bypass security restrictions and gain increased privileges.

The vulnerability of the Data Protection Module of the Endpoint DLP agent for remote access to corporate resources and Prisma Access Agent applications is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow attackers to circumvent security...

The vulnerability of the formWanTcpipSetup function in the goform/formWanTcpipSetup file of the POST Request Handler component of the microprogramming system for wireless signal amplifiers from Edimax BR-6428NS, which allows a hacker to cause a service failure.

The vulnerability of the formWanTcpipSetup function in the goform/formWanTcpipSetup file of the POST Request Handler component of the wireless signal amplifiers’ microprogramming system, Edimax BR-6428NS, is related to the issue where the operation output goes beyond the buffer in memory when...

The vulnerability of the Trust Protection Foundation’s key and certificate management tool, which allows unauthorized individuals to access system data, enables attackers to gain unauthorized access to protected information.

The vulnerability of the Trust Protection Foundation’s key management and certificate management tools involves the disclosure of system data to unauthorized individuals. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

The vulnerability in the Open WebUI web interface, related to the unlimited loading of dangerous types of files, allows attackers to bypass existing security mechanisms and load any files they desire.

The vulnerability of the Open WebUI web interface is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms and load any desired files...

The vulnerability of the Go programming language, related to incorrect calculations, allows attackers to trigger service failures.

The vulnerability of the Go programming language is related to incorrect calculations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the HDF5 library, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the HDF5 library is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the GlobalProtect portal and the GlobalProtect Gateway server of the PAN-OS operating system allows a hacker to bypass security restrictions.

The vulnerability of the GlobalProtect portal and the GlobalProtect Gateway server, which run on the PAN-OS operating system, stems from the use of cookies without proper validation and integrity checks. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions...

The vulnerability of the libexpat XML file analysis library lies in the execution of a loop with an unreachable exit condition, allowing an attacker to cause a service failure.

The vulnerability of the libexpat library for analyzing XML files is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Python library for working with PDF files, PyPDF, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the mp function in the goform/mp component of the webs microprogramming system for wireless signal amplifiers from Edimax EW-7438RPn allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the mp function in the goform/mp component of the webs microprogramming system for wireless signal amplifiers from Edimax EW-7438RPn is related to an out-of-buffer operation in memory when processing the command parameter. Exploiting this vulnerability allows a remote attacke...

The vulnerability of the formWirelessTbl function in the goform/formWirelessTbl file of the POST Request Handler component of the Edimax BR-6428NS wireless signal amplifiers’ microprogramming system allows a hacker to induce a service failure.

The vulnerability of the formWirelessTbl function in the goform/formWirelessTbl file of the POST Request Handler component of the microprogramming software for wireless signal amplifiers from Edimax BR-6428NS is related to the execution of operations outside the buffer in memory when processing t...

The vulnerability of the Trust Protection Foundation’s key and certificate management mechanism, related to the failure to protect the SQL query structure, allows attackers to execute arbitrary commands and gain access to read, modify, and delete data.

The vulnerability of the Trust Protection Foundation TPF key management and certificate management mechanisms is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary commands and gain access to read, modify...

The vulnerability in the Open WebUI web interface, related to the mechanism for restricting access to API keys, allows attackers to bypass existing security measures and gain unauthorized access to protected information.

The vulnerability in the Open WebUI web interface is related to the mechanism for restricting access to API keys. Exploiting this vulnerability allows a malicious actor to bypass existing security measures and gain unauthorized access to protected information...

The vulnerability of the Go programming language, related to errors in the certificate validation process, allows a perpetrator to cause service failures.

The vulnerability of the Go programming language is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...