CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118642 | HIGH | 7.1 | n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows a… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118641 | HIGH | 7.5 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains an OData $filter injection… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118640 | MEDIUM | 5.4 | n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability in Chat Hub t… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118633 | HIGH | 8.1 | A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118265 | MEDIUM | 5.3 | Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's ExtractIPFromRealIPHeader validates wh… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118264 | NONE | — | Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware selects a raw… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118263 | NONE | — | Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's BodyDump middleware can discard a Body… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118262 | NONE | — | Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware can retain a… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118261 | NONE | — | Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in Decompress middleware exposes … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118260 | NONE | — | Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in BodyDump middleware reads comp… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118259 | MEDIUM | 5.3 | opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and … |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118258 | LOW | 3.7 | i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, bro… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118257 | HIGH | 7.2 | Vue I18n is the internationalization plugin for Vue.js. From 11.1.10 until 11.4.14 and from 12.0.0-a… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118256 | NONE | — | Vue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 and 12.0.0-a… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118255 | NONE | — | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118254 | NONE | — | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118253 | NONE | — | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dash… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118252 | NONE | — | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dash… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118251 | NONE | — | Highcharts JS is a JavaScript charting library based on SVG. Prior to 11.4.9, 12.6.1, and 13.1.0, Hi… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-106484 | MEDIUM | 4.4 | Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allo… |
T1190
T1059
+1
|
|
2026-10-28 |