SiYuan: Tag labels from password-protected documents are returned to readers who have not entered the password
CVE-2026-72792
**CVE:** This vulnerability corresponds to [CVE-2026-72792](https://nvd.nist.gov/vuln/detail/CVE-2026-72792). ### Summa
#severity:medium
共收录 5482 条相关情报。
← 返回所有主题SiYuan: Static-file routes bypass the publish-access controls enforced on the REST API, exposing templates, snippets and export artifacts to anonymous readers
CVE-2026-72796
**CVE:** This vulnerability corresponds to [CVE-2026-72796](https://nvd.nist.gov/vuln/detail/CVE-2026-72796). ### Summa
SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers
CVE-2026-72797
**CVE:** This vulnerability corresponds to [CVE-2026-72797](https://nvd.nist.gov/vuln/detail/CVE-2026-72797). ### Summa
SiYuan: Missing publish-access filter on the HPath/path-resolution endpoints discloses the private document tree to anonymous readers
CVE-2026-72799
**CVE:** This vulnerability corresponds to [CVE-2026-72799](https://nvd.nist.gov/vuln/detail/CVE-2026-72799). ### Summa
SurrealDB: Writes in a PERMISSIONS clause bypass table permissions
CVE-2026-63733
A `PERMISSIONS ... WHERE` clause is evaluated with permission enforcement disabled, so it can't recurse into its own che
A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an...
CVE-2026-85636
A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the
A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring...
CVE-2026-85769
A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state (for examp
SurrealDB allows bypass of deny-net flags via DNS resolution
CVE-2025-71390
SurrealDB offers http functions that can access external network endpoints. A typical, albeit [not recommended ](https:/
A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability...
CVE-2026-85402
A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of
A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by...
CVE-2026-85399
A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is
A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the...
CVE-2026-85398
A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability....
CVE-2026-85149
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote
A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the...
CVE-2026-85397
A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch
A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d...
CVE-2026-85379
A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814c
A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d...
CVE-2026-85380
A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61
A security vulnerability has been detected in light0011 cms...
CVE-2026-85381
A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a061
MOOS core-moos through 10.4.0 fails to escape database contents when rendering MOOSDB HTTP pages,...
CVE-2026-85453
MOOS core-moos through 10.4.0 fails to escape database contents when rendering MOOSDB HTTP pages, allowing attackers to
MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in...
CVE-2026-85456
MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowin
MOOS core-moos through 10.4.0 contains a buffer overflow vulnerability in CMOOSSerialPort:...
CVE-2026-85454
MOOS core-moos through 10.4.0 contains a buffer overflow vulnerability in CMOOSSerialPort::GetTelegram() that writes a N
Out-of-bounds read vulnerability in Samsung Opensource Escargot allows Overread Buffers. This...
CVE-2026-49509
Out-of-bounds read vulnerability in Samsung Opensource Escargot allows Overread Buffers. This issue affects Escargot: 2