72915 matches found
MINI-JF28-WF8G-7473
Bulletin has no description...
MINI-CGRQ-JJ39-564M
Bulletin has no description...
CGA-45RQ-XW7P-76PQ
Bulletin has no description...
CVE-2026-69086
SiYuan before v3.7.3 fails to validate the avID parameter in attribute-view read endpoints across all code branches, enabling path traversal that escapes the storage directory. Authenticated users with RoleReader permissions or anonymous clients when publish authentication is disabled can read JS...
CVE-2026-69086 SiYuan before v3.7.3 Path Traversal via unvalidated avID
SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read endpoints, allowing attackers to construct traversal paths that escape the storage directory. Authenticated users with RoleReader permissions or anonymous clients when publish...
CVE-2026-69086 SiYuan before v3.7.3 Path Traversal via unvalidated avID
SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read endpoints, allowing attackers to construct traversal paths that escape the storage directory. Authenticated users with RoleReader permissions or anonymous clients when publish...
CVE-2026-9487 XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID
XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID. getsignedxml in lib/XML/Sig.pm, called from verify, resolves the SignedInfo Reference/@URI to a node with the XPath expression "//@ID='$id'" and returns the first node of the resulting node set. A document in which...
CVE-2026-9487
XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID. getsignedxml in lib/XML/Sig.pm, called from verify, resolves the SignedInfo Reference/@URI to a node with the XPath expression "//@ID='$id'" and returns the first node of the resulting node set. A document in which...
CVE-2026-9390
XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup. verify and getsignedxml in lib/XML/Sig.pm build XPath expressions by concatenating the SignedInfo/Reference/@URI value read from the document being verified. The value is neither escaped nor checked against the NCName...
MINI-9HHP-RV9G-H5WR
Bulletin has no description...
MINI-4RVH-7HFF-575X
Bulletin has no description...
CVE-2026-12860
creationtimestamp| type| source ---|---|--- 2026-08-03 11:46:51+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12860...
CVE-2026-12802
creationtimestamp| type| source ---|---|--- 2026-08-03 11:22:37+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12802...
CVE-2026-64114
creationtimestamp| type| source ---|---|--- 2026-08-03 08:43:09+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...
MINI-V5HX-VMVJ-F992
Bulletin has no description...
MINI-6RP5-66VW-GRM2
Bulletin has no description...
MINI-G62H-XXH9-C4M7
Bulletin has no description...
MINI-C5FF-9XRX-JC8R
Bulletin has no description...