Lucene search
K

6 matches found

CVE
CVE
added 2026/03/26 9:15 p.m.12 views

CVE-2026-33670

SiYuan has a vulnerability CVE-2026-33670 where the /api/file/readDir interface allows directory traversal to enumerate filenames of all documents under a notebook. This occurs in versions prior to 3.6.2; the issue is mitigated by upgrading to 3.6.2 or later. The connected sources consistently de...

9.8CVSS5.8AI score0.0066EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2025/10/20 8:27 p.m.3 views

GHSA-G9QW-G6RV-3889 Taguette vulnerable to cross-site scripting via tag name, tag description, document name and document description

Impact An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for a project member to put JavaScript in name or description fields which would run on project load. Patches Users should upgrade to Taguette 1.5.0. References -...

5.4CVSS6.7AI score0.00161EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2025/10/20 8:27 p.m.5 views

Taguette vulnerable to cross-site scripting via tag name, tag description, document name and document description

Impact An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for a project member to put JavaScript in name or description fields which would run on project load. Patches Users should upgrade to Taguette 1.5.0. References -...

5.4CVSS6.8AI score0.00161EPSS
Exploits0References5Affected Software1
CNVD
CNVD
added 2021/08/03 12:0 a.m.64 views

Telegram Cross-Site Scripting Vulnerability

Telegram is an instant messaging mobile application. version 0.6.1 of Telegram Web K Alpha is vulnerable to a cross-site scripting vulnerability that stems from the fact that Telegram Web K Alpha allows XSS to pass through document names. An attacker could exploit the vulnerability to execute...

6.1CVSS4.8AI score0.00619EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/07/30 12:0 a.m.3 views

Telegram 跨站脚本漏洞

Telegram is an instant messaging mobile application. version 0.6.1 of Telegram Web K Alpha is vulnerable to a cross-site scripting vulnerability that stems from the fact that Telegram Web K Alpha allows XSS to pass through document names. An attacker could exploit the vulnerability to execute...

6.1CVSS5.3AI score0.00619EPSS
Exploits0References1
NVD
NVD
added 2019/04/09 4:29 p.m.11 views

CVE-2018-15635

Cross-site scripting vulnerability in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote attackers to inject arbitrary web script in the browser of an internal user of the system by tricking them into inviting a follower on a document with a...

6.1CVSS5.8AI score0.01004EPSS
Exploits0References1
Rows per page
Query Builder