CVE Vulnerability Database
Search and browse 424,703 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109288 | MEDIUM | 6.4 | 0.2% | Oct 12, 2026 | Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which rend... |
| CVE-2026-109287 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify... |
| CVE-2026-109286 | HIGH | 8.1 | 0.1% | Oct 12, 2026 | Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows... |
| CVE-2026-109285 | MEDIUM | 5 | 0.2% | Oct 12, 2026 | Open WebUI from 0.6.0 before 0.11.4 contains an improper access control vulnerability in has_access_to_file that lets fo... |
| CVE-2026-109284 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which pl... |
| CVE-2026-109283 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, which reads ... |
| CVE-2026-109282 | LOW | 2.5 | 0.1% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders,... |
| CVE-2026-109281 | MEDIUM | 4.4 | 0.1% | Oct 12, 2026 | ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain... |
| CVE-2026-109280 | LOW | 2.5 | 0.1% | Oct 12, 2026 | ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory... |
| CVE-2026-109279 | LOW | 2.5 | 0.1% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, ... |
| CVE-2026-109278 | LOW | 3.7 | 0.4% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet-denoise operation, which fail... |
| CVE-2026-109277 | LOW | 3.3 | 0.1% | Oct 12, 2026 | ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on fil... |
| CVE-2026-109276 | MEDIUM | 5.3 | 0.4% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails t... |
| CVE-2026-109275 | MEDIUM | 4.8 | 0.3% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a P... |
| CVE-2026-109274 | LOW | 2.5 | 0.1% | Oct 12, 2026 | ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to byp... |
| CVE-2026-109273 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript ... |
| CVE-2026-109272 | LOW | 3.7 | 0.4% | Oct 12, 2026 | ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered whe... |
| CVE-2026-109271 | LOW | 3.7 | 0.4% | Oct 12, 2026 | ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a me... |
| CVE-2026-109270 | LOW | 3.3 | 0.1% | Oct 12, 2026 | ImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process option that allows attackers to cause u... |
| CVE-2026-109269 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the JPEG decode... |
| CVE-2026-109268 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writ... |
| CVE-2026-109267 | MEDIUM | 5.5 | 0.4% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect... |
| CVE-2026-109266 | LOW | 3.6 | 0.3% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML injection vulnerability in the CIP encoder, which d... |
| CVE-2026-109265 | MEDIUM | 5.3 | 0.4% | Oct 12, 2026 | ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond ... |
| CVE-2026-109264 | LOW | 3.7 | 0.4% | Oct 12, 2026 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG decoder that can exhaust... |