13584 matches found
CVE-2026-118678
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability that allows low-privileged users to alter built-in object behaviour by saving workflows with specially named connection keys. Attackers can add keys such as proto to workflow connections, which the periodic...
EUVD-2026-112384
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability that allows low-privileged users to alter built-in object behaviour by saving workflows with specially named connection keys. Attackers can add keys such as proto to workflow connections, which the periodic...
CVE-2026-99181
In the Linux kernel, the following vulnerability has been resolved: autofs: ignore notification errors from a replaced pipe autofsnotifydaemon takes a reference to the current notification pipe under wqmutex, then drops the mutex before writing the request. The write can block while the daemon...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 7.1. It arises because ntfssetattrsize fails to hold a mapping-invalidatelock when updating isize and adjusting disk attributes. This can lead to page errors and resize conflicts, potentially causing VCN parsing failures and generating...
ROS-20261028-73-0016
The vulnerability in the authfile.c component of the sshd service within the OpenSSH cryptographic suite is related to key management errors. Exploitation of this vulnerability may allow an attacker to gain unauthorized access to protected information...
CVE-2026-118678: Improperly Controlled Modification of Object Prototype Attributes
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability that allows low-privileged users to alter built-in object behaviour by saving workflows with specially named connection keys. Attackers can add keys such as proto to workflow connections, which the periodic...
Dell PowerProtect Data Domain digital error vulnerability
Versions 7.7.1.0 through 8.8, 7.13.1.0 through 7.13.1.80, 8.3.1.0 through 8.3.1.40, and 8.6.1.0 through 8.6.1.20 of Dell PowerProtect Data Domain contain a numerical error vulnerability. This vulnerability stems from integer overflow or wrap-around errors. Privileged attackers with remote access...
CVE-2026-76418: Unchecked Return Value to NULL Pointer Dereference
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service...
PT-2026-129181
Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall ASA Software affected versions not specified Cisco Secure Firewall FTD Software affected versions not specified Description A flaw exists in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security...
n8n input validation error vulnerability
Versions prior to n8n 2.41.4 and versions 2.42.x prior to 2.42.1 contain an input validation error vulnerability stemming from prototype pollution. Low-privilege users can modify the behavior of built-in objects by saving workflows containing specially crafted connection keys. Attackers can add...
PT-2026-129152
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability that allows low-privileged users to alter built-in object behaviour by saving workflows with specially named connection keys. Attackers can add keys such as proto to workflow connections, which the periodic...
VulnCheck KEV: CVE-2026-76418
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition...
ROS-20261027-73-0033
The vulnerability in tomcat-native is related to synchronization errors when using shared resources. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
TencentOS Server 4: php (TSSA-2026:1204)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1204 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
CVE-2026-116461
A vulnerability was determined in Omega Solution Restro POS up to 20261026. This impacts an unknown function of the file /sale-invoice/. Executing a manipulation of the argument productUnitSalePrice can lead to business logic errors. The attack may be performed from remote. The exploit has been...
EUVD-2026-110051
A vulnerability was determined in Omega Solution Restro POS up to 20261026. This impacts an unknown function of the file /sale-invoice/. Executing a manipulation of the argument productUnitSalePrice can lead to business logic errors. The attack may be performed from remote. The exploit has been...
ROS-20261026-73-0149
The vulnerability in openssh is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Google Chrome Microsoft Edge Data Compromise
The vulnerability in the Browser component of Google Chrome and Microsoft Edge is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...
FedCM Component Access Protected Information
The vulnerability in the FedCM web browser components for Google Chrome and Microsoft Edge is related to authorization errors. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
Google Chrome Microsoft Edge DOM Component Access
The DOM component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...