SiYuan versions before v3.7.4 fail to enforce publish-access checks in the getBlockAttrs and...
CVE-2026-72803
SiYuan versions before v3.7.4 fail to enforce publish-access checks in the getBlockAttrs and batchGetBlockAttrs endpoint
#severity:medium
共收录 5494 条相关情报。
← 返回所有主题SiYuan versions before v3.7.4 fail to enforce publish-access checks on getBlockBreadcrumb,...
CVE-2026-72805
SiYuan versions before v3.7.4 fail to enforce publish-access checks on getBlockBreadcrumb, getRefText, and getBlockTreeI
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the...
CVE-2026-72802
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the resolveAssetPath endpoint that retu
Craft CMS versions before 5.10.8 contain a stored cross-site scripting vulnerability in the...
CVE-2026-72787
Craft CMS versions before 5.10.8 contain a stored cross-site scripting vulnerability in the control panel where draft na
SiYuan v3.7.4-alpha.1 (a pre-release; the endpoint does not exist in stable v3.7.3 or earlier)...
CVE-2026-72791
SiYuan v3.7.4-alpha.1 (a pre-release; the endpoint does not exist in stable v3.7.3 or earlier) contains an information d
SiYuan before v3.7.4 (affected <=v3.7.2) fails to enforce publish-access filters on five filetree...
CVE-2026-72799
SiYuan before v3.7.4 (affected <=v3.7.2) fails to enforce publish-access filters on five filetree path-resolution endpoi
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the...
CVE-2026-72797
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getEncryptedNotebookStatus endpoint
SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/notebook...
CVE-2026-72790
SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/notebook/getNotebookInfo endpoint that
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout...
CVE-2026-72788
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout filter that fails to prope
SiYuan versions before v3.7.4 fail to apply publish-access filtering to the...
CVE-2026-72800
SiYuan versions before v3.7.4 fail to apply publish-access filtering to the getAttributeViewKeysByID endpoint, allowing
SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/tag/getTag...
CVE-2026-72792
SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/tag/getTag endpoint that returns tag l
SiYuan before v3.7.4 contains an access control bypass vulnerability where static-file routes in...
CVE-2026-72796
SiYuan before v3.7.4 contains an access control bypass vulnerability where static-file routes in the server mux bypass p
GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.0.6, 19.1...
CVE-2026-6821
GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.0.6, 19.1 before 19.1.4, and 19.2
ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An...
CVE-2026-19657
ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker wh
When kuma-dp is started against an HTTPS control plane and the operator did not pass a CA...
CVE-2026-18679
When kuma-dp is started against an HTTPS control plane and the operator did not pass a CA certificate, the data plane co
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive...
CVE-2026-18150
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race c
GitLab has remediated an issue in GitLab EE affecting all versions from 16.0 before 19.0.6, 19.1...
CVE-2026-4879
GitLab has remediated an issue in GitLab EE affecting all versions from 16.0 before 19.0.6, 19.1 before 19.1.4, and 19.2
Draft List is a WordPress plugin to manage and promote unpublished content. Versions 2.6.3 and...
CVE-2026-49466
Draft List is a WordPress plugin to manage and promote unpublished content. Versions 2.6.3 and below are vulnerable to s
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to inject arbitrary...
CVE-2026-18148
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to inject arbitrary content into Navigator log
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19...
CVE-2026-18433
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that u