Podatności

n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site scripting vulnerability in the Chat Trigger hosted-chat page, where insufficiently sanitised customCss values are interpolated into the page as markup. Workflow authors can publish a chat without n8n user…

CVSS 7,0 · EPSS 0,37 % · rekomendacja wg zapisanej polityki

A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them. In a multi-cluster deployment, each cluster pulls replication tasks from the remote…

CVSS 7,0 · EPSS 0,36 % · rekomendacja wg zapisanej polityki

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVSS 7,0 · EPSS 0,33 % · rekomendacja wg zapisanej polityki

NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths. Attackers controlling the model_filename or model argument can make the weka JVM write files via -d or probe files via -l…

CVSS 7,0 · EPSS 0,32 % · rekomendacja wg zapisanej polityki

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression values directly into SQL text without parameterisation. When a workflow binds untrusted input such as webhook fields to the Query…

CVSS 7,0 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVSS 7,0 · EPSS 0,28 % · rekomendacja wg zapisanej polityki