SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark...
CVE-2026-93923
SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing st
#cwe-79
共收录 5425 条相关情报。
← 返回所有主题SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without...
CVE-2026-93922
SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing store
SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting. Attackers can supply crafted n...
CVE-2026-93923
CVE-2026-93923 是 SiYuan(思源笔记)中一个存储型跨站脚本(XSS)漏洞,影响 3.8.4 及之前的所有版本。问题根因在于渲染层对 HTML 的转义处理不完整:当应用把笔记中的标题(heading)渲染进「大纲(outl
SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing stored cross-site scripting in the Electron renderer. Attacker...
CVE-2026-93922
该漏洞影响思源笔记（SiYuan）3.8.4 及之前的所有版本，属于存储型跨站脚本（Stored XSS）问题，CVSS 3.1 评分为 8.8（高危）。问题的根因在于「每日笔记（Daily Note）」选择器对话框在渲染笔记本（noteb
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to...
CVE-2026-84108
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...
CVE-2026-84106
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...
CVE-2026-82832
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...
CVE-2026-84031
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...
CVE-2026-84074
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...
CVE-2026-84070
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...
CVE-2026-82890
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due t
Open edX Platform enables the authoring and delivery of online learning at any scale. From Redwood until Ulmo and Verawood.1, the add_additional_attributes_to_notifications func...
CVE-2026-85271
Open edX Platform enables the authoring and delivery of online learning at any scale. From Redwood until Ulmo and Verawo
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVE-2026-84108
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVE-2026-84106
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVE-2026-84074
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVE-2026-84070
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVE-2026-84031
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due to improper neutralization of input during web page genera...
CVE-2026-82890
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary JavaScript code due t
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVE-2026-82832
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper
A flaw was found in the Quarkus Qute template engine. When the {#eval} section helper processes a sub-template, it fails to pass the parent template's content type information. ...
CVE-2026-93432
A flaw was found in the Quarkus Qute template engine. When the {#eval} section helper processes a sub-template, it fails