Lucene search
+L

3 matches found

CNNVD
CNNVD
•added 2026/10/20 4:00 p.m.•9 views

Pillow numeric error vulnerability

Versions of Pillow prior to 13.0.0 contain a numeric error vulnerability. This vulnerability stems from the lack of validation for negative glyph steps when summing the width of PILfont text in src/imaging.c. Repeating signed 16-bit steps of -32768 can lead to integer overflow, potentially...

6.5CVSS6AI score0.00345EPSS
SaveExploits0References5
Mend
Mend
•added 2026/07/08 1:49 p.m.•26 views

CVE-2026-59253

n8n before 2.28.0 contains an improper authorization vulnerability allowing authenticated users to assign workflows to folders in other projects. Attackers can bypass project and folder authorization boundaries by supplying crafted request payloads during workflow creation, causing logical...

5.3CVSS5.8AI score0.0028EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/08 12:00 a.m.•9 views

CVE-2026-59253: Authorization Bypass Through User-Controlled Key

n8n before 2.28.0 contains an improper authorization vulnerability allowing authenticated users to assign workflows to folders in other projects. Attackers can bypass project and folder authorization boundaries by supplying crafted request payloads during workflow creation, causing logical...

5.3CVSS5.8AI score0.0028EPSS
SaveExploits0References4
Rows per page
Query Builder