SiYuan Notes Software Web App is a privacy-first personal knowledge management system that supports full offline use as well as end-to-end encrypted synchronization. Yunnan ChainDrop Technology Co., Ltd. has an XSS vulnerability in the Siyuan Notes Software Web application, which can be exploited by attackers to obtain sensitive information such as user cookies.

🗓️ 18 Sep 2023 00:00:00Reported by China National Vulnerability DatabaseType

SiYuan Notes Software Web App, privacy-first knowledge management, supports offline use and end-to-end encryption. XSS vulnerability. Apache Airflow, open source workflow platform, has code execution vulnerability due to wrong pip package installation instruction

Reporter	Title	Published	Views	Family All 16
BDU FSTEC	The vulnerability of the network-based software for automating data processing tasks in HDFS and Apache Airflow’s HDFS Provider lies in the fact that functions from an unverified controlled area are enabled, allowing attackers to load arbitrary packages.	19 Sep 202300:00	–	bdu_fstec
Circl	CVE-2023-41267	14 Sep 202312:24	–	circl
CNNVD	Apache Airflow 安全漏洞	14 Sep 202300:00	–	cnnvd
CVE	CVE-2023-41267	14 Sep 202307:46	–	cve
Cvelist	CVE-2023-41267 Apache HDFS Provider error message suggested installation of incorrect pip package	14 Sep 202307:46	–	cvelist
EUVD	EUVD-2023-2432	3 Oct 202520:07	–	euvd
Tenable Nessus	Fedora 40 : golang-cloud-google / golang-cloud-google-bigquery / etc (2023-f23d9c5057)	29 Apr 202400:00	–	nessus
Github Security Blog	Apache HDFS Provider error message suggested	14 Sep 202309:30	–	github
NVD	CVE-2023-41267	14 Sep 202308:15	–	nvd
OSV	GHSA-5HJ9-M76G-XRC8 Apache HDFS Provider error message suggested	14 Sep 202309:30	–	osv