CVE Vulnerability Catalog

The Superior Court of California Hearing Reminder Service exposes an API endpoint that returns court reminder records containing potentially sensitive information without authentication.

Ghost, a Node.js content management system, from version 6.27.0 before 6.44.0 had a vulnerability in the public donation checkout flow. An unauthenticated attacker could control donation checkout metadata and obtain full paid gift memberships for a minimal payment.

An authenticated administrator may achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1.

A vulnerability was found in TOTOLINK X5000R versions 9.1.0cu.2415_B20250515 and 9.1.0cu.2350_B20230313 in the exportOvpn function of the /web/cgi-bin/cstecgi.cgi file within the OpenVPN Export component. This vulnerability allows remote path traversal attacks.

A security vulnerability has been detected in YzmCMS up to version 7.5. The function get_url in the file /yzmphp/yzmphp.php of the Header Handler component is affected. Manipulation of the HTTP_HOST argument leads to cross-site scripting (XSS), which can be exploited remotely. The exploit has been publicly disclosed and may be used.

A weakness has been identified in the apidevtools json-schema-ref-parser library, impacting the Refs.set/Pointer.set function in lib/pointer.ts. A manipulation can lead to improperly controlled modification of object prototype attributes, and the attack can be launched remotely. The fix is available in version 15.3.6.

In Open WebUI from version 0.8.11 before 0.10.0, the POST /api/v1/images/edit endpoint only required a verified account but did not enforce the global image-edit switch or per-user image-generation permission. This allowed a non-admin user to invoke server-side image editing with administrator-configured provider credentials.

In Open WebUI from version 0.8.12 before 0.10.0, an authenticated non-admin user with read access to an arena wrapper model can bypass access control to a restricted underlying model via task endpoints like /api/v1/tasks/moa/completions. The normal chat route checks the arena model before dispatching, while the task route calls generate_chat_completion() directly with bypass_filter=True, skipping the submodel's access check.

In Open WebUI prior to version 0.10.0, the WEB_FETCH_FILTER_LIST matching compared configured host entries against URL strings, allowing bypass of blocklists via path-based entries (e.g., !internal.example.com) and sibling-domain matches that did not reflect the intended hostname policy.

A vulnerability in Open WebUI versions 0.7.0 through 0.10.0 allows a regular channel participant to retrieve sensitive settings of other users, including API keys and webhook configurations, via a GET request to /api/v1/channels//members. The issue is fixed in version 0.10.0.

A vulnerability in Open WebUI before version 0.10.0 allowed a ReDoS (Regular Expression Denial of Service) attack by sending a specially crafted chat message containing <$ without a closing >. The SKILL_MENTION_RE and strip_re regular expressions in backend/open_webui/utils/middleware.py caused quadratic backtracking, blocking the asyncio event loop.

In Open WebUI prior to version 0.10.0, the /api/v1/auths/signin endpoint allowed account enumeration via timing side-channel. Requests for registered users were measurably slower (due to bcrypt verification) than for non-existent emails, enabling unauthenticated attackers to enumerate valid accounts.

In Open WebUI prior to version 0.10.0, the file upload path accepted the metadata.knowledge_id parameter and automatically linked uploaded files to a target knowledge base without applying the write-access check used by /api/v1/knowledge//file/add, allowing read-only knowledge-base users to add arbitrary files.

In Open WebUI before version 0.10.0, the _verify_knowledge_file_access function only checked read permissions, while file write and delete routes later trusted permissions derived from the writable model meta.knowledge object. This allowed a user with read-only knowledge file access to gain file write or delete capabilities.

In n8n prior to versions 1.123.61, 2.27.4, and 2.28.1, an authenticated member with use-only editor access to a shared workflow could read credential-populated headers exposed via the $request object inside an HTTP Request node and exfiltrate the secret through item data.

The Tag plugin for GLPI 11 before 2.14.4 stores the tag name without HTML sanitization and renders it into the Kanban badge markup without output escaping, resulting in stored cross-site scripting. An authenticated user with TAG MANAGEMENT create or update rights can set a tag name containing HTML, which then executes in the browser of any user who opens the Kanban view of a ticket, problem, change, or project the tag is attached to.

An input validation vulnerability in the RTSP service of MERCURY MIPC252W IP Camera (version 1.0.5 Build 230306 Rel.79931n) allows an unauthenticated, network-adjacent attacker to cause a denial of service (DoS) via a crafted DESCRIBE request with a malformed URL.

A vulnerability was found in openclaw-android up to version 0.4.0, allowing OS command injection in the JsBridge.kt file. The flaw resides in the WebView bridge component and can be exploited locally. An exploit has been publicly disclosed, and a fix is pending acceptance.

A missing authentication vulnerability has been found in Mettle SendPortal up to version 3.0.1, affecting the APIv1 Webhooks component for sendgrid/postmark/postal/mailjet functions. The attack can be carried out remotely and the exploit has been publicly disclosed.

A vulnerability has been found in Mettle SendPortal up to version 3.0.1 in the campaign creation endpoint. Unknown code in CampaignStoreRequest.php allows remote authorization bypass. The exploit has been published and may be used.