38534 matches found
Astra Linux – Vulnerability in Chromium
In ANGLE, reading outside the bounds of the allowed area in Google Chrome on Linux before version 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Medium...
USN-8596-1: Linux kernel (NVIDIA) vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...
USN-8594-1 linux-oem-6.17 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block...
ROS-20260723-73-0067
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Google Chrome buffer overflow vulnerability (CNVD-2026-30673)
Chrome is a web browser developed by Google. Google Chrome has a security vulnerability, which stems from a boundary error in the V8 module. Attackers can exploit this vulnerability to execute arbitrary code within the sandbox through specially crafted HTML pages...
Prototype Pollution
Overview n8n-core is a Core functionality of n8n Affected versions of this package are vulnerable to Prototype Pollution in the expression engine. An attacker can cause the application to become unresponsive or crash by manipulating array-element access to obtain a reference to a host built-in an...
GHSA-HX4H-VR3M-45VH n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service
Impact An authenticated user able to create or edit a workflow expression could abuse the expression engine's array-element access to obtain a reference to a host built-in and pollute its prototype in the main n8n process, leading to a denial of service. Both self-hosted and cloud instances runni...
GHSA-PM35-FQVH-CQ5G n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution
Impact The legacy expression evaluator's computed-member sanitizer can be bypassed by an authenticated user with workflow create or modify permissions. Successful exploitation grants the attacker host-level code execution as the n8n process. The legacy expression engine is the default engine in...
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
Overview n8n is a n8n Workflow Automation Tool Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' via the legacy expression evaluator's computed-member sanitizer. An attacker can...
n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution
Impact The legacy expression evaluator's computed-member sanitizer can be bypassed by an authenticated user with workflow create or modify permissions. Successful exploitation grants the attacker host-level code execution as the n8n process. The legacy expression engine is the default engine in...
GHSA-Q3J5-8VRG-4P9Q n8n: Shared Credential Header Leak via HTTP Request Pagination Expression
Impact An authenticated member with use-only editor access to a shared workflow could read credential-populated headers exposed via the $request object inside an HTTP Request node's pagination expression. When an HTTP Header Auth credential is applied to a paginated request, the secret is present...
n8n: Shared Credential Header Leak via HTTP Request Pagination Expression
Impact An authenticated member with use-only editor access to a shared workflow could read credential-populated headers exposed via the $request object inside an HTTP Request node's pagination expression. When an HTTP Header Auth credential is applied to a paginated request, the secret is present...
CVE-2026-13078
A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit...
CVE-2026-13073
An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation command, resulting in denial of service for all connected clients until the process is restarted. The issue stems from an internal engine selection inconsistency...
UBUNTU-CVE-2026-13073
An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation command, resulting in denial of service for all connected clients until the process is restarted. The issue stems from an internal engine selection inconsistency...
CVE-2026-13073
An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation command, resulting in denial of service for all connected clients until the process is restarted. The issue stems from an internal engine selection inconsistency...
CVE-2026-13078
A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit...
CVE-2026-13073 MongoDB Aggregation Command Invariant Assertion Failure Leading to Process Termination
An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation command, resulting in denial of service for all connected clients until the process is restarted. The issue stems from an internal engine selection inconsistency...
EUVD-2026-47788
An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation command, resulting in denial of service for all connected clients until the process is restarted. The issue stems from an internal engine selection inconsistency...
CVE-2026-13073
The CVE describes an issue in MongoDB’s mongod where an authenticated user with read-only privileges can trigger abnormal termination via a crafted aggregation command. The root cause is an internal engine selection inconsistency caused by a specific combination of aggregation options, leading to...