Lucene search
K

21428 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/25 6:39 p.m.1 views

CVE-2026-33749

n8n is an open source workflow automation platform. Prior to versions 1.123.27, 2.13.3, and 2.14.1, an authenticated user with permission to create or modify workflows could craft a workflow that produces an HTML binary data object without a filename. The /rest/binary-data endpoint served such...

6.3CVSS5.9AI score0.0005EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/25 6:39 p.m.2 views

CVE-2026-33749 n8n Vulnerable to XSS via Binary Data Inline HTML Rendering

n8n is an open source workflow automation platform. Prior to versions 1.123.27, 2.13.3, and 2.14.1, an authenticated user with permission to create or modify workflows could craft a workflow that produces an HTML binary data object without a filename. The /rest/binary-data endpoint served such...

6.3CVSS5.9AI score0.0005EPSS
Exploits0References1
OSV
OSV
added 2026/03/25 6:39 p.m.2 views

CVE-2026-33749 n8n Vulnerable to XSS via Binary Data Inline HTML Rendering

n8n is an open source workflow automation platform. Prior to versions 1.123.27, 2.13.3, and 2.14.1, an authenticated user with permission to create or modify workflows could craft a workflow that produces an HTML binary data object without a filename. The /rest/binary-data endpoint served such...

6.3CVSS5.9AI score0.0005EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/03/25 6:39 p.m.21 views

CVE-2026-33749 n8n Vulnerable to XSS via Binary Data Inline HTML Rendering

n8n is an open source workflow automation platform. Prior to versions 1.123.27, 2.13.3, and 2.14.1, an authenticated user with permission to create or modify workflows could craft a workflow that produces an HTML binary data object without a filename. The /rest/binary-data endpoint served such...

6.3CVSS0.0005EPSS
Exploits0References1
CVE
CVE
added 2026/03/25 6:39 p.m.4 views

CVE-2026-33749

n8n is vulnerable to XSS in versions prior to 1.123.27, 2.13.3, and 2.14.1. An authenticated user who can create or modify workflows could craft a workflow that returns an HTML binary data object via /rest/binary-data without a filename and without Content-Disposition or Content-Security-Policy h...

9CVSS5.9AI score0.0005EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.3 views

PT-2026-28090

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.27 n8n versions prior to 2.13.3 n8n versions prior to 2.14.1 Description n8n is a workflow automation platform. An authenticated user with appropriate permissions could create a workflow that generates HTML binary...

9CVSS5.8AI score0.0005EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.2 views

n8n 跨站脚本漏洞

n8n is an open-source, scalable workflow automation tool developed by n8n. Versions of n8n prior to 1.123.27, 2.13.3, and 2.14.1 contained a cross-site scripting vulnerability. This vulnerability stemmed from the absence of binary data endpoint response headers, which could lead to cross-site...

9CVSS5.6AI score0.0005EPSS
Exploits0References2
Snyk
Snyk
added 2026/03/06 12:0 a.m.1 views

Access of Uninitialized Pointer

Overview Affected versions of this package are vulnerable to Access of Uninitialized Pointer in the processgotsectioncontents function when handling a specially crafted ELF binary containing malformed relocation or symbol data. An attacker can cause the application to terminate abnormally by...

5.5CVSS5.8AI score0.00006EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/01/30 12:0 a.m.3 views

Delta Electronics DIAView Hard-coded JWT Secret Key (CVE-2025-62581)

Binary data deltaelectronicsdiaviewcve-2025-62581.nbin...

9.8CVSS5.9AI score0.00027EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/24 12:55 a.m.3 views

CVE-2026-24404 iccDEV has Null Pointer Deference and Undefined Behavior in CIccXmlArrayType()

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In versions 2.3.1.1 and below, CIccXmlArrayType contains a Null Pointer Dereference and Undefined Behavior vulnerability. This occurs when user-controllable input is unsafely...

7.1CVSS5.8AI score0.00208EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.3 views

MiracleLinux 8 : freeradius:3.0 (AXSA:2023-5978:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5978:01 advisory. freeradius: Information leakage in EAP-PWD CVE-2022-41859 freeradius: Crash on unknown option in EAP-SIM CVE-2022-41860 freeradius: Crash on invalid...

7.5CVSS5.6AI score0.00393EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/16 7:25 p.m.2 views

CVE-2026-22803

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From 2.49.0 to 2.49.4, the experimental form remote function uses a binary data format containing a representation of submitted form data. A specially-crafted payload can cause the server to allocate...

8.2CVSS6.9AI score0.00023EPSS
Exploits0References1
NVD
NVD
added 2026/01/15 7:16 p.m.3 views

CVE-2026-22803

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From 2.49.0 to 2.49.4, the experimental form remote function uses a binary data format containing a representation of submitted form data. A specially-crafted payload can cause the server to allocate...

8.2CVSS0.00023EPSS
Exploits0References3
EUVD
EUVD
added 2026/01/15 6:37 p.m.1 views

EUVD-2026-2789

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From 2.49.0 to 2.49.4, the experimental form remote function uses a binary data format containing a representation of submitted form data. A specially-crafted payload can cause the server to allocate...

8.2CVSS6.3AI score0.00023EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/01/15 6:37 p.m.3 views

CVE-2026-22803

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From 2.49.0 to 2.49.4, the experimental form remote function uses a binary data format containing a representation of submitted form data. A specially-crafted payload can cause the server to allocate...

8.2CVSS5.6AI score0.00023EPSS
Exploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

ScienceLogic Skylar One Detection

Binary data sciencelogicskylaronedetect.nbin...

7AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:0 a.m.4 views

Amazon S3 Encryption Client for Java JAR Detection

Binary data s3encryptionclientjavadetect.nbin...

7AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/12 12:0 a.m.2 views

Gogs Detection

Binary data gogsdetect.nbin...

7AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/12 12:0 a.m.1 views

Gladinet Triofox Agent Installed (Windows)

Binary data gladinettriofoxagentwininstalled.nbin...

7AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/09 12:0 a.m.3 views

IBM QRadar Installed

Binary data ibmqradarnixinstalled.nbin...

7AI score
Exploits0References1
Rows per page
Query Builder