Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate...
CVE-2026-65818
Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.
2026-09-04 归档
今日共收录 1362 条安全情报，包含 399 个 CVE，552 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Improper neutralization of special elements in data query logic in Microsoft Discovery Studio...
CVE-2026-62906
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized att
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker...
CVE-2026-69857
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing ov
A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4....
CVE-2026-18330
A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who capt
A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55...
CVE-2026-18167
A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is e
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user...
CVE-2026-64196
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user...
CVE-2026-64199
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user...
CVE-2026-64198
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user...
CVE-2026-64200
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results
There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user...
CVE-2026-64195
There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Success
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user...
CVE-2026-64197
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in
SiYuan: Encrypted-notebook key-derivation material and wrapped notebook keys disclosed to anonymous readers, enabling offline master-password cracking
CVE-2026-72801
**CVE:** This vulnerability corresponds to [CVE-2026-72801](https://nvd.nist.gov/vuln/detail/CVE-2026-72801). ### Summa
SiYuan: Graph endpoints omit the publish-password tier: anonymous readers receive block-level content of password-protected documents
CVE-2026-72804
**CVE:** This vulnerability corresponds to [CVE-2026-72804](https://nvd.nist.gov/vuln/detail/CVE-2026-72804). ### Summa
SiYuan: Missing publish-access check on getBlockBreadcrumb, getRefText, and getBlockTreeInfos discloses content and metadata of protected/forbidden documents
CVE-2026-72805
**CVE:** This vulnerability corresponds to [CVE-2026-72805](https://nvd.nist.gov/vuln/detail/CVE-2026-72805). ### Summa
SiYuan: Password (protected) tier omitted in the attribute-view/database publish filter: Reader receives rows of protected documents without the password (publish mode)
CVE-2026-72806
**CVE:** This vulnerability corresponds to [CVE-2026-72806](https://nvd.nist.gov/vuln/detail/CVE-2026-72806). ### Summa
SiYuan: Second-order SSTI to arbitrary SQL via attribute-view template column (queryBlocks): malicious imported package executes SQL on victim kernel
CVE-2026-72807
**CVE:** This vulnerability corresponds to [CVE-2026-72807](https://nvd.nist.gov/vuln/detail/CVE-2026-72807). ### Summa
SiYuan: Missing publish-access filter on getFileAnnotation discloses private PDF annotations of forbidden/protected documents (publish mode)
CVE-2026-72808
**CVE:** This vulnerability corresponds to [CVE-2026-72808](https://nvd.nist.gov/vuln/detail/CVE-2026-72808). ### Summa
SiYuan: Localhost-trust admin bypass on auth-code-gated endpoints, with potential remote reachability via the fixed-port proxy
CVE-2026-72809
**CVE:** This vulnerability corresponds to [CVE-2026-72809](https://nvd.nist.gov/vuln/detail/CVE-2026-72809). ### Summa
SiYuan: Publish-boundary bypass via WebSocket broadcast: anonymous readers receive a live unfiltered feed of all edits including protected/forbidden documents (publish mode)
CVE-2026-72810
**CVE:** This vulnerability corresponds to [CVE-2026-72810](https://nvd.nist.gov/vuln/detail/CVE-2026-72810). ### Summa
Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker...
CVE-2026-85051
Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary cod