CVE-2026-85173

n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes . Authenticated users holding insights scopes can supply arbitrary projectId parameters to retrieve workflow names and execution statistics from projects they are not members of, effect...

EUVD-2026-60764

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-73692

This CVE ID has been rejected by its CVE Numbering Authority. The underlying vulnerability, tracked as PT-2026-77030 , affects Dolibarr and involves an authorization bypass in the clonetasks mass action . The root cause is an inverted boolean condition in the private-project membership check with...

The vulnerability of the N8n automation platform, related to bypassing authentication using a user-controlled key, allows attackers to disclose protected information.

The vulnerability of the N8n automation platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability allows an attacker, operating remotely, to disclose protected information by sending a specially crafted request with the projectId parameter...

EUVD-2006-3336

Malware in sbrugna...

CVE-2024-25222

Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php...

CVE-2024-25222

Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php...

Sql injection

Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php...

CVE-2024-25222

CVE-2024-25222 affects Task Manager App v1.0, with a SQL injection vulnerability in the /TaskManager/EditProject.php endpoint, exploitable via the projectID parameter. The CVSSv3.1 vector/metrics indicate a CRITICAL impact (CVSS 9.8; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Connected sources confirm...

CVE-2006-3339: Undefined Security Weakness

secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the installation path and other system information in an error message...

CVE-2005-4485: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the keywords parameter to 1 forums.asp, 2 searchemployees.asp, 3 cat.asp, and 4 links.asp; 5 projectid parameter to pmprojects.asp, 6 retpage parameter...