1294593 matches found
CVE-2026-105205
SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink block IDs and reference counts from password-protected and publish-disabled documents by querying a published document. Attackers can send POST requests to /api/block/getDocInfo...
CVE-2026-105206
ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against the caller's organization rather than the organization owning the target user. An authenticated member holding org-scoped user.read can query GET...
EUVD-2026-92099
ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against the caller's organization rather than the organization owning the target user. An authenticated member holding org-scoped user.read can query GET...
CVE-2026-105205
SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink block IDs and reference counts from password-protected and publish-disabled documents by querying a published document. Attackers can send POST requests to /api/block/getDocInfo...
EUVD-2026-92098
SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink block IDs and reference counts from password-protected and publish-disabled documents by querying a published document. Attackers can send POST requests to /api/block/getDocInfo...
CVE-2026-105205 SiYuan before 3.8.5 Information Disclosure via /api/block/getDocInfo and getDocsInfo
SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink block IDs and reference counts from password-protected and publish-disabled documents by querying a published document. Attackers can send POST requests to /api/block/getDocInfo...
The vulnerability of the setBufferingPeriodSEI function in the vvdecapp component (VVdeC), which relates to reading beyond the buffer, allows a hacker to trigger a service failure or gain access to protected information.
The vulnerability of the setBufferingPeriodSEI function in the vvdecapp VVdeC component is related to reading data beyond the buffer’s capacity. Exploiting this vulnerability could allow an attacker to cause a service failure or gain access to protected information...
The vulnerability of the software interface (REST API) of the GEO.RITM software lies in the lack of authentication when accessing the function for retrieving object attributes. This allows attackers to gain unauthorized access to confidential information.
The vulnerability of the GEO.RITM software’s RESTful API lies in the lack of authentication when accessing the function for retrieving object attributes. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to confidential information...
The vulnerability of the Serial Wire Debug interface (SWD) in the highly integrated wireless system on chip (SoC) Realtek RTL8762C allows a hacker to circumvent existing security restrictions and expose sensitive information.
The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...
The vulnerability affects the embedded energy-independent single-write eFUSE memory module in Realtek RTL8762C, a highly integrated wireless system on chip (SoC). This module allows a hacker to circumvent existing security restrictions and expose sensitive information.
The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...
The vulnerability in the kernel of operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS allows attackers to disclose protected information.
The vulnerability of the kernel in operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS is related to a kernel address leakage. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...
The vulnerability of the Squadus software, related to the storage of information in an open manner, allows a intruder to disclose the protected information.
The vulnerability of the Squadus software lies in the fact that information is stored in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
The vulnerability of the ClamAV antivirus software lies in its insufficient validation of input data, allowing attackers to circumvent existing security restrictions.
The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the FOQUZ platform, related to the disclosure of information in debugging messages, allows attackers to compromise the confidentiality of the protected information.
The vulnerability of the FOQUZ platform is related to the disclosure of information in debugging messages. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality of the protected information...
The vulnerability of the FOQUZ platform, related to insufficient protection of operational data, allows attackers to disclose the protected information.
The vulnerability of the FOQUZ platform is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
The vulnerability of the FOQUZ platform, related to incorrect restrictions on path names in the catalog, allows attackers to compromise the accessibility of protected information.
The vulnerability of the FOQUZ platform is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of the protected information...
The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.
The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...
CVE-2001-0934
CVE-2001-0934 Cooolsoft PowerFTP Server 2.03 允许远程攻击者通过 pwd 命令获取服务器根目录的物理路径，该命令会列出完整路径名。 Securiteam 发布在 http://www.securiteam.com/exploits/6D00L2A35K.html 外部信息在 https://marc.info/?l=bugtraq&m=100698397818175&w=2 Cisco 参考在 https://tools.cisco.com/security/center/viewAlert.x?alertId=2884 作者 Alex...
CVE-2021-40352
CVE-2021-40352 OpenEMR 版本 6.0.0 存在一个安全漏洞：拥有医生权限的攻击者可以读取发送给其他成员（包括管理员）的消息。 该漏洞存在于打印消息功能中，即 "pnotesprint.php?noteid=16"。 将 "noteid=" 更改为任意其他数字即可泄露所有人的消息。 发现者：Allen Enosh Upputori，2021年9月。 CVE 发布日期：31/08/2021 查看此 CVE：https://vulners.com/cve/CVE-2021-40352...
CVE-2023-28432
CVE-2023-28432 MinIO存在信息泄露漏洞，未经身份认证的远程攻击者通过发送特殊HTTP请求即可获取所有环境变量，其中包括MINIOSECRETKEY和MINIOROOTPASSWORD，造成敏感信息泄露，最终可能导致攻击者以管理员身份登录MinIO Fofa指纹 app="minio" 工具利用 python3 minio.py -u http://127.0.0.1:1111 单个url测试 python3 minio.py -f url.txt 批量检测 扫描结束后会在当前目录生成存在漏洞url的vuln.txt exp： 免责声明...