PT-2026-28080

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.26 n8n versions prior to 2.13.3 n8n versions prior to 2.14.1 Description n8n is a workflow automation platform susceptible to a SQL injection issue in the Data Table Get node. An authenticated user with appropriate...

CVE-2026-33713: Improper Neutralization of Special Elements used in an SQL Command

n8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.26, an authenticated user with permission to create or modify workflows could exploit a SQL injection vulnerability in the Data Table Get node. On default SQLite DB, single statements can be manipulate...

Malicious code in @emerald-react/data-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3fa586593204d665de94f83c5ea8f0bf33a55ea4d5a8ae915e8ba32b9ba176 The package @emerald-react/data-table was found to contain malicious code...

MAL-2026-1605 Malicious code in @emerald-react/data-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3fa586593204d665de94f83c5ea8f0bf33a55ea4d5a8ae915e8ba32b9ba176 The package @emerald-react/data-table was found to contain malicious code...

CVE-2025-14610

The TableMaster for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.6. This is due to the plugin not restricting which URLs can be fetched when importing CSV data from a URL in the Data Table widget. This makes it possible for...

CVE-2025-11820 Graphina – Elementor Charts and Graphs <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Widgets

The Graphina – Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple chart widgets in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping on data attributes. This makes it possible for authenticat...

WordPress TableGen – Data Table Generator plugin <= 1.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin TableGen – Data Table Generator versions = 1.3.1...

EUVD-2024-52563

Malicious code in bioql PyPI...

EUVD-2024-45509

Malicious code in bioql PyPI...

WordPress plugin TableGen – Data Table Generator: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site...

CVE-2025-10053: Improper Neutralization of Input During Web Page Generation

The TableGen – Data Table Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2022-50320

The CVE-2022-50320 issue is a Linux kernel ACPI FPDT FPDT table bug where invalid physical addresses trigger ioremap warnings and an oops. The root cause is calling acpi_os_map_memory() on an invalid phys address; a fix adds a validation step to prevent mapping invalid addresses. The description ...

CVE-2025-58613: Missing Authorization

Missing Authorization vulnerability in Barn2 Plugins Posts Table with Search & Sort posts-data-table allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Table with Search & Sort: from n/a through = 1.4.10...

Malicious code in es-data-table (npm)

The package es-data-table was found to contain malicious code...

Malicious code in jcatalog-react-fixed-data-table (npm)

The package jcatalog-react-fixed-data-table was found to contain malicious code...

MAL-2025-23706 Malicious code in jcatalog-react-fixed-data-table (npm)

The package jcatalog-react-fixed-data-table was found to contain malicious code...

MAL-2025-19810 Malicious code in es-data-table (npm)

The package es-data-table was found to contain malicious code...

my-first-vue-project (0.1.0), react-responsive-data-table (>=1.0.0, <=1.0.5) potentially affected by unknown CVE via bootstrap4 (0.0.1-security)

bootstrap4 NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap4 and may be impacted: - my-first-vue-project 0.1.0 - react-responsive-data-table =1.0.0, =1.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15992...

Linux Distros Unpatched Vulnerability : CVE-2025-38319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/pp: Fix potential NULL pointer dereference in atomctrlinitializemcregtable The function atomctrlinitializemcregtable and atomctrlinitializemcregtablev22...

SUSE CVE-2025-38319

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pp: Fix potential NULL pointer dereference in atomctrlinitializemcregtable The function atomctrlinitializemcregtable and atomctrlinitializemcregtablev22 does not check the return value of smuatomgetdatatable. If...