Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.1n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create EndpointEPSS 0.2%Oct 14, 2026
- High7.2n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node ParametersEPSS 0.2%Oct 14, 2026
- High7.2n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File PreviewEPSS 0.2%Oct 14, 2026
- Medium6.0n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection MergeEPSS 0.3%Oct 14, 2026
- High7.0n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss ParameterEPSS 0.4%Oct 14, 2026
- High7.0n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-WebhookEPSS 0.5%Oct 14, 2026
- High7.7n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log OperationEPSS 0.3%Oct 14, 2026
- High7.2n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-WorkflowsEPSS 0.3%Oct 14, 2026
- High8.2n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize EndpointEPSS 0.3%Oct 14, 2026
- Medium6.3qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a stringEPSS 0.3%Oct 14, 2026
- High7.5In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check.EPSS 0.4%Oct 14, 2026
- Medium6.3A security vulnerability has been detected in Praat up to 7.0.02.EPSS 0.3%Oct 14, 2026
- High7.4An administrator could retrieve the password reset code for any user and take over the account.EPSS 0.3%Oct 14, 2026
- Critical9.1When the default self-signed certificate is used, an attacker could gain administrative access to the application.EPSS 0.2%Oct 14, 2026
- Critical9.1When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack.EPSS 0.2%Oct 14, 2026
- Medium6.9A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449.EPSS 0.4%Oct 14, 2026
- Medium6.9A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1.EPSS 0.3%Oct 14, 2026
- Medium6.9A vulnerability was found in cemtan sar2html 4.0.0.EPSS 0.3%Oct 14, 2026
- Medium5.3FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.EPSS 0.4%Oct 14, 2026
- Medium6.8FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.EPSS 0.3%Oct 14, 2026
- High8.1FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.EPSS 0.2%Oct 14, 2026
- Medium6.5FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.EPSS 0.3%Oct 14, 2026
- Medium6.5FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.EPSS 0.3%Oct 14, 2026
- Medium6.4FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.EPSS 0.2%Oct 14, 2026
- Medium5.4FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.EPSS 0.2%Oct 14, 2026