SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates...
CVE-2026-73052
SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them directly into option
#advisory
共收录 23530 条相关情报。
← 返回所有主题siyuan versions <= 3.7.3 (fixed in v3.7.4) contain a server-side template injection vulnerability...
CVE-2026-73047
siyuan versions <= 3.7.3 (fixed in v3.7.4) contain a server-side template injection vulnerability in the attribute-view
Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in...
CVE-2026-73055
Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in assignment contexts on
SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket...
CVE-2026-73054
SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differe
SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth()...
CVE-2026-73046
SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth() middleware. The HTTP Basi
SiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts...
CVE-2026-73045
SiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts vulnerability in the authFileP
SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation,...
CVE-2026-73042
SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allowing stored values to ex
SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing...
CVE-2026-73044
SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting
SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template...
CVE-2026-73043
SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calculation operator, which
SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the...
CVE-2026-73041
SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the setFileAnnotation endp
A vulnerability was detected in code-projects Online Food Order System 1.0. The affected element...
CVE-2026-19916
A vulnerability was detected in code-projects Online Food Order System 1.0. The affected element is an unknown function
The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to...
CVE-2026-18855
The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation
A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6...
CVE-2026-19905
A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHSoft.Web.HrmAttendanc
A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the...
CVE-2026-19906
A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege...
CVE-2026-19598
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization
A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability...
CVE-2026-19904
A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the
A vulnerability was found in VictoriaMetrics up to 1.146.0. Impacted is the function...
CVE-2026-19898
A vulnerability was found in VictoriaMetrics up to 1.146.0. Impacted is the function requestHandler of the file app/vmau
A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown...
CVE-2026-19901
A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/
A vulnerability has been found in mangroup dtale up to 3.22.0. This issue affects the function...
CVE-2026-19897
A vulnerability has been found in mangroup dtale up to 3.22.0. This issue affects the function Login of the file dtale/a
A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an...
CVE-2026-19900
A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file