Lucene search
+L

717 matches found

NVD
NVD
added 1 hour ago3 views

CVE-2026-69086

SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read endpoints, allowing attackers to construct traversal paths that escape the storage directory. Authenticated users with RoleReader permissions or anonymous clients when publish...

8.3CVSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2 hours ago3 views

CVE-2026-69086

SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read endpoints, allowing attackers to construct traversal paths that escape the storage directory. Authenticated users with RoleReader permissions or anonymous clients when publish...

8.3CVSS
SaveExploits0References3
Cvelist
Cvelist
added 2 hours ago5 views

CVE-2026-69086 SiYuan before v3.7.3 Path Traversal via unvalidated avID

SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read endpoints, allowing attackers to construct traversal paths that escape the storage directory. Authenticated users with RoleReader permissions or anonymous clients when publish...

8.3CVSS
SaveExploits0References2
EUVD
EUVD
added 2 hours ago3 views

EUVD-2026-52279

SiYuan versions before v3.7.3 fail to validate the avID parameter on all code branches in attribute-view read endpoints, allowing attackers to construct traversal paths that escape the storage directory. Authenticated users with RoleReader permissions or anonymous clients when publish...

8.3CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2 hours ago3 views

EUVD-2026-52277

SiYuan versions = v3.7.2 expose the /api/search/searchEmbedBlock endpoint, which passes a client-supplied SQL statement verbatim to the main read-write siyuan.db handle with no single-statement, read-only, or admin restrictions. The endpoint is gated only by CheckAuth, making it reachable by the...

10CVSS5.7AI score
SaveExploits0References2
CVE
CVE
added 2 hours ago4 views

CVE-2026-68585

Affected product/versions: SiYuan before v3.7.3. Vulnerable endpoint: /api/block/getBlockInfo. Root cause: endpoint returns document root metadata (including title) for publish-forbidden documents without publish-access checks. Impact: anonymous readers or publish RoleReader tokens can query a bl...

6.9CVSS5.5AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2 hours ago2 views

CVE-2026-68585

SiYuan versions before v3.7.3 contain a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint that returns document root metadata including title for publish-forbidden documents without publish-access checks. Anonymous readers or publish RoleReader tokens can supply a block ID...

6.9CVSS
SaveExploits0References3
EUVD
EUVD
added 2 hours ago2 views

EUVD-2026-52273

SiYuan versions before v3.7.3 contain a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint that returns document root metadata including title for publish-forbidden documents without publish-access checks. Anonymous readers or publish RoleReader tokens can supply a block ID...

6.9CVSS5.5AI score
SaveExploits0References2
Cvelist
Cvelist
added 2 hours ago4 views

CVE-2026-68584 SiYuan before v3.7.3 Authentication Bypass via Content Endpoints

SiYuan versions before v3.7.3 contain an authentication bypass vulnerability in publish mode where content-returning endpoints getHeadingChildrenDOM, getHeadingTransaction, and getBacklinkDoc perform no password check despite protecting the primary getDoc endpoint. Anonymous attackers can retriev...

9.2CVSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2 hours ago2 views

CVE-2026-68584

SiYuan versions before v3.7.3 contain an authentication bypass vulnerability in publish mode where content-returning endpoints getHeadingChildrenDOM, getHeadingTransaction, and getBacklinkDoc perform no password check despite protecting the primary getDoc endpoint. Anonymous attackers can retriev...

9.2CVSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 3 days ago9 views

CVE-2026-15722

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

7.5CVSS5.8AI score0.0051EPSS
SaveExploits0References3
Nuclei
Nuclei
added 4 days ago23 views

Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query

Drupal core from 8.9.0 before 10.4.10, 10.5.0 before 10.5.10, 10.6.0 before 10.6.9, 11.0.0 before 11.1.10, 11.2.0 before 11.2.12, and 11.3.0 before 11.3.10 contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL...

9.8CVSS7.4AI score0.88319EPSS
SaveExploits15References2
Cvelist
Cvelist
added last week33 views

CVE-2026-65924 Server-Side Request Forgery (SSRF) via Terraform Remote repository

JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Server-Side Request Forgery SSRF. An authenticated user - or, if anonymous access is enabled on the repository, an unauthenticated user - could cause Artifactory to issue outbound HTTP requests to arbitrary...

6.5CVSS0.00215EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added last week28 views

CVE-2026-65924

JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Server-Side Request Forgery SSRF. An authenticated user - or, if anonymous access is enabled on the repository, an unauthenticated user - could cause Artifactory to issue outbound HTTP requests to arbitrary...

6.5CVSS6AI score0.00215EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/27 6:0 a.m.9 views

CVE-2026-13390

The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for a particular status value, allowing unauthenticated attackers to mark existing import records as failed and to store...

5.9AI score0.00182EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/27 12:0 a.m.9 views

PT-2026-65112

JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Server-Side Request Forgery SSRF. An authenticated user - or, if anonymous access is enabled on the repository, an unauthenticated user - could cause Artifactory to issue outbound HTTP requests to arbitrary...

6.5CVSS6AI score0.00215EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/24 2:16 p.m.9 views

CVE-2026-21723

A flaw was found in Grafana. A remote attacker with very low privileges, or even anonymous access if enabled, can exploit the alertmanager templates test endpoint by mass-executing templates. This can lead to an Out-Of-Memory OOM error, causing the Grafana service to crash and resulting in a Deni...

5.3CVSS5.9AI score0.00198EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/07/24 2:41 a.m.11 views

SUSE CVE-2026-21723

The alertmanager templates test endpoint /api/alertmanager/grafana/config/api/v1/templates/test can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with...

5.3CVSS6AI score0.00198EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/23 3:16 a.m.15 views

CVE-2026-21723

The alertmanager templates test endpoint /api/alertmanager/grafana/config/api/v1/templates/test can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with...

5.3CVSS0.00198EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/23 1:48 a.m.36 views

CVE-2026-21723 CVE-2026-21723 Record

The alertmanager templates test endpoint /api/alertmanager/grafana/config/api/v1/templates/test can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with...

5.3CVSS0.00198EPSS
SaveExploits0References1
Rows per page
Query Builder