A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster...
CVE-2026-72508
A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM). This
#advisory
共收录 23530 条相关情报。
← 返回所有主题Craft CMS versions before 5.10.8 contain a stored cross-site scripting vulnerability in the...
CVE-2026-72787
Craft CMS versions before 5.10.8 contain a stored cross-site scripting vulnerability in the control panel where draft na
SiYuan before v3.7.4 fails to properly validate publish access for encrypted notebooks, treating...
CVE-2026-72789
SiYuan before v3.7.4 fails to properly validate publish access for encrypted notebooks, treating them as publicly access
SiYuan v3.7.4-alpha.1 (a pre-release; the endpoint does not exist in stable v3.7.3 or earlier)...
CVE-2026-72791
SiYuan v3.7.4-alpha.1 (a pre-release; the endpoint does not exist in stable v3.7.3 or earlier) contains an information d
SiYuan before v3.7.4 (affected <=v3.7.2) fails to enforce publish-access filters on five filetree...
CVE-2026-72799
SiYuan before v3.7.4 (affected <=v3.7.2) fails to enforce publish-access filters on five filetree path-resolution endpoi
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the...
CVE-2026-72797
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getEncryptedNotebookStatus endpoint
SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/notebook...
CVE-2026-72790
SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/notebook/getNotebookInfo endpoint that
SiYuan versions before v3.7.4 fail to properly filter related-database content in...
CVE-2026-72798
SiYuan versions before v3.7.4 fail to properly filter related-database content in renderAttributeView, allowing anonymou
SiYuan versions before v3.7.4 disclose encrypted-notebook key-derivation material and wrapped...
CVE-2026-72801
SiYuan versions before v3.7.4 disclose encrypted-notebook key-derivation material and wrapped data keys through unauthen
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout...
CVE-2026-72788
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout filter that fails to prope
siyuan versions before v3.7.4 expose the session cookie signing key through the /api/system...
CVE-2026-72794
siyuan versions before v3.7.4 expose the session cookie signing key through the /api/system/getConf endpoint to unauthen
SiYuan versions before v3.7.4 fail to apply publish-access filtering to the...
CVE-2026-72800
SiYuan versions before v3.7.4 fail to apply publish-access filtering to the getAttributeViewKeysByID endpoint, allowing
SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/tag/getTag...
CVE-2026-72792
SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/tag/getTag endpoint that returns tag l
SiYuan before v3.7.4 contains an access control bypass vulnerability where static-file routes in...
CVE-2026-72796
SiYuan before v3.7.4 contains an access control bypass vulnerability where static-file routes in the server mux bypass p
SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the...
CVE-2026-72795
SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEmbed and ge
Craft CMS versions before 5.10.8 contain an authentication bypass vulnerability in the elements...
CVE-2026-72786
Craft CMS versions before 5.10.8 contain an authentication bypass vulnerability in the elements/save action that allows
GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.0.6, 19.1...
CVE-2026-6821
GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.0.6, 19.1 before 19.1.4, and 19.2
SiYuan versions before v3.7.4 fail to mask sensitive configuration fields in the /api/system...
CVE-2026-72793
SiYuan versions before v3.7.4 fail to mask sensitive configuration fields in the /api/system/getConf endpoint, allowing
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a...
CVE-2026-17083
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflo
ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An...
CVE-2026-19657
ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker wh