32754 matches found
No title provided
A flaw was found in quarkus-spring-web. A remote attacker could exploit this vulnerability by manipulating the URL query string. The system incorrectly reads the URL query string as a request header, which can lead to an authorization bypass, allowing unauthorized access to resources...
No title provided
A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...
No title provided
A flaw was found in quarkus-spring-web. A remote attacker could exploit this vulnerability by manipulating the URL query string. The system incorrectly reads the URL query string as a request header, which can lead to an authorization bypass, allowing unauthorized access to resources...
No title provided
A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...
CVE-2026-85167
n8n versions before 2.35.4 and 2.36.x before 2.36.2 are affected by a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query nodes. The root cause is that these operations build their JSON query by interpolating expression values directly int...
CVE-2026-85167 n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...
EUVD-2026-70402
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...
CVE-2026-85167 n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...
CVE-2026-85167 n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...
An Empirical Analysis of CodeQL False Positives and Query Refinements for Java Vulnerabilities
Static application security testing SAST tools help developers find vulnerabilities before deployment, but false positives create substantial triage effort. We study whether CodeQL false positives in Java security analysis form recurring, explainable patterns that can be reduced by refining the...
PT-2026-85307
Name of the Vulnerable Software and Affected Versions Microsoft Discovery Studio affected versions not specified Description Improper neutralization of special elements in data query logic allows an unauthorized attacker to disclose protected information over a network. Recommendations At the...
CVE-2026-62906: Improper Neutralization of Special Elements in Data Query Logic
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network...
CVE-2026-85167: Improper Neutralization of Special Elements in Data Query Logic
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...
CVE-2026-33630: Double Free
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...
CVE-2026-78080: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite 5.1.0 - The cid parameter is used in queries without validation, allowing SQLi vectors...
CVE-2026-85227: Improper Neutralization of Input During Web Page Generation
MISP contains a reflected Cross-Site Scripting XSS vulnerability in the event attribute filtering query builder. The taggedAttributes and galaxyAttachedAttributes URL parameters were inserted into the query-builder rules without HTML escaping before being serialized as JSON and embedded inside a...
PT-2026-85058
MISP contains a reflected Cross-Site Scripting XSS vulnerability in the event attribute filtering query builder. The taggedAttributes and galaxyAttachedAttributes URL parameters were inserted into the query-builder rules without HTML escaping before being serialized as JSON and embedded inside a...
PT-2026-84999
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All and Google Cloud Firestore Document Query operations, which build their JSON query by interpolating expression values directly into the query string before parsing. A value...
PT-2026-84974
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authenticated user with operator privileges can manipulate SQL queries to extract information from the database. This occurs because input provided to the del...
Casdoor authentication server is vulnerable to authorization bypass
Overview Casdoor is an open-source Access Management IAM platform used to manage web applications. An authorization bypass vulnerability affects Casdoor versions up to v4.2.0. The vulnerability allows a non-global organization administrator to perform unauthorized administrative actions against...