20119 matches found
CVE-2026-27493
n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a second-order expression injection vulnerability existed in n8n's Form nodes that could allow an unauthenticated attacker to inject and evaluate arbitrary n8n expressions by submitting crafted form...
CVE-2026-27727
A flaw was found in mchange-commons-java, a Java utility library. An attacker can exploit this vulnerability by providing a maliciously crafted javax.naming.Reference or serialized object to an application using the library. This can provoke the application to download and execute arbitrary...
CVE-2026-27699
A flaw was found in basic-ftp, an FTP client library. A malicious FTP server can exploit a path traversal vulnerability CWE-22 within the downloadToDir method. This allows the server to send directory listings containing special sequences that trick the client into writing files to unintended...
CVE-2026-3146
A flaw was found in libvips. A local user could trigger a null pointer dereference by manipulating the vipsforeignloadmatrixheader function. This vulnerability could lead to a Denial of Service DoS, causing the application to become unresponsive. Mitigation Mitigation for this issue is either not...
CVE-2026-3147
A flaw was found in libvips. A local attacker could exploit a heap-based buffer overflow vulnerability in the vipsforeignloadcsvbuild function. This vulnerability, triggered by manipulating CSV file loading, could lead to unauthorized information disclosure, denial of service DoS, or limited data...
CVE-2026-3145
A flaw was found in libvips. A local attacker can exploit a vulnerability in the vipsforeignloadmatrixfileisa and vipsforeignloadmatrixheader functions by executing an empty but very large input. This can lead to memory corruption, potentially causing a denial of service or other impacts...
Security Bulletin: IBM Sterling Transformation Extender is affected by MongoBleed security vulnerability
Summary IBM Sterling Transformation Extender uses MongoDB and is affected by MongoBleed security vulnerability CVE-2025-14847. Vulnerability Details CVEID:CVE-2025-14847 DESCRIPTION: Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an...
firefox: thunderbird: Mitigation bypass in the DOM: Security component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Security component...
firefox: thunderbird: Mitigation bypass in the DOM: HTML Parser component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: HTML Parser component...
firefox: thunderbird: Mitigation bypass in the Networking: Cache component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Networking: Cache component...
firefox: thunderbird: Mitigation bypass in the Networking: Cache component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Networking: Cache component...
firefox: thunderbird: Mitigation bypass in the DOM: Security component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Security component...
firefox: thunderbird: Mitigation bypass in the DOM: HTML Parser component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: HTML Parser component...
firefox: thunderbird: Mitigation bypass in the Networking: Cache component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Networking: Cache component...
firefox: thunderbird: Mitigation bypass in the DOM: Security component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Security component...
firefox: thunderbird: Mitigation bypass in the DOM: HTML Parser component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: HTML Parser component...
CVE-2026-3190
A flaw was found in Keycloak. The User-Managed Access UMA 2.0 Protection API endpoint for permission tickets fails to enforce the umaprotection role check. This allows any authenticated user with a token issued for a resource server client, even without the umaprotection role, to enumerate all...
CVE-2026-3184
A flaw was found in util-linux. Improper hostname canonicalization in the login1 utility, when invoked with the -h option, can modify the supplied remote hostname before setting PAMRHOST. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing...
