CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118688 | HIGH | 7.9 | wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118687 | MEDIUM | 6.5 | Coder before 2.29.21, 2.30.0 before 2.34.12, 2.35.0 before 2.35.9, 2.36.0 before 2.36.7, and 2.37.0 … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118686 | HIGH | 7.5 | EspoCRM before 9.3.11 and 10.x before 10.0.8 contains a denial of service vulnerability in which the… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118685 | MEDIUM | 6.5 | ToolJet from 3.20.2-lts before 3.20.242-lts contains an authorization bypass in SignupDisableGuard, … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118684 | MEDIUM | 5.9 | MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check_hash() tha… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118683 | HIGH | 8.8 | MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__ini… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118681 | LOW | 3.7 | go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118680 | MEDIUM | 4.4 | SiYuan 3.8.7 through 3.8.8 fails to normalize Windows GLOBALROOT device-namespace aliases, bypassing… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118679 | HIGH | 7.5 | n8n before 1.123.83, 2.41.4, and 2.42.1 contains a server-side request forgery vulnerability in the … |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118678 | HIGH | 7.1 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability that allows … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118677 | MEDIUM | 5.9 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Loca… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118676 | HIGH | 7.1 | n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows m… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118675 | HIGH | 7.1 | n8n before 1.123.85, 2.43.5, and 2.44.1 contains a credential guard bypass vulnerability that allows… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118649 | HIGH | 8.3 | n8n before 2.43.5 and 2.44.x before 2.44.1 accepts a client-supplied workflow ID and caches each wor… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118648 | HIGH | 7.3 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a stored cross-site script… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118647 | HIGH | 8.2 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's A… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118646 | MEDIUM | 6.5 | n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerabilit… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118645 | HIGH | 8.7 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a filter injection vulnera… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118644 | HIGH | 7.7 | n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full execution context, includ… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118643 | HIGH | 8.2 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execut… |
T1190
T1203
|
|
2026-10-28 |