|
871
|
6.1 |
MEDIUM
Network
|
cacti
|
cacti
|
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Reflected XSS via tab parameter in the auth_profile.php JavaScript context. This issue …
New
|
CWE-79
Cross-site Scripting
|
CVE-2026-39900
|
2026-06-26 00:00 |
2026-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
872
|
9.8 |
CRITICAL
Network
|
ni
|
instrumentstudio ni_grpc_device_server
|
There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory dereference, potentially resulting in remo…
New
|
CWE-822
Untrusted Pointer Dereference
|
CVE-2026-48137
|
2026-06-25 23:43 |
2026-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
873
|
7.5 |
HIGH
Network
|
ni
|
instrumentstudio ni_grpc_device_server
|
There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service. Successful exploitation requires an attacker to …
New
|
CWE-125
Out-of-bounds Read
|
CVE-2026-48138
|
2026-06-25 23:42 |
2026-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
874
|
7.5 |
HIGH
Network
|
ni
|
instrumentstudio ni_grpc_device_server
|
There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial of service by triggering a crash. Successful exploitation…
New
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-48139
|
2026-06-25 23:42 |
2026-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
875
|
6.5 |
MEDIUM
Network
|
ni
|
instrumentstudio ni_grpc_device_server
|
There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum states and undefined behavior, potentially resulting in a denial…
New
|
CWE-704
Incorrect Type Conversion or Cast
|
CVE-2026-48140
|
2026-06-25 23:41 |
2026-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
876
|
7.5 |
HIGH
Network
|
ni
|
instrumentstudio ni_grpc_device_server
|
There is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion. This affects NI grpc-device 2.17.0 and prior versions.
New
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2026-48141
|
2026-06-25 23:41 |
2026-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
877
|
9.1 |
CRITICAL
Network
|
ni
|
instrumentstudio ni_grpc_device_server
|
There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback. This may allow an unauthenticated user access …
New
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2026-9142
|
2026-06-25 23:40 |
2026-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
878
|
5.3 |
MEDIUM
Network
|
ni
|
instrumentstudio ni_grpc_device_server
|
There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen. This may silently discard high bits if a size value exceeded the target…
New
|
CWE-681
Incorrect Conversion between Numeric Types
|
CVE-2026-9143
|
2026-06-25 23:39 |
2026-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
879
|
4.3 |
MEDIUM
Network
|
openwebui
|
open_webui
|
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, a path traversal vulnerability exists in open-webui's cache file serving endpoint th…
New
|
CWE-22
Path Traversal
|
CVE-2026-54014
|
2026-06-25 23:36 |
2026-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
880
|
6.4 |
MEDIUM
Network
|
openwebui
|
open_webui
|
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI's prompt version-history endpoints authorize the prompt_id in the URL but…
New
|
CWE-284 CWE-639
Improper Access Control Authorization Bypass Through User-Controlled Key
|
CVE-2026-54015
|
2026-06-25 23:35 |
2026-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|