36151 matches found
MINI-3XGC-53CX-FF5F
Bulletin has no description...
MINI-3Q3M-F8VH-FCC8
Bulletin has no description...
Logged-in user bypasses share password and download restrictions on Text attachments via documentId
None...
MINI-W737-RP7H-6X4Q
Bulletin has no description...
MINI-VW74-24FX-VMMF
Bulletin has no description...
MINI-V3QQ-HQPF-8V99
Bulletin has no description...
MINI-PQ2M-J5PR-C4QM
Bulletin has no description...
MINI-3673-3WXJ-CWPM
Bulletin has no description...
MINI-8HWM-VGV3-4957
Bulletin has no description...
MINI-86QW-WX92-PXJR
Bulletin has no description...
MINI-24J5-V4M9-MHVP
Bulletin has no description...
EUVD-2026-29358
Reserved. Details will be published at disclosure...
EUVD-2026-29355
Reserved. Details will be published at disclosure...
Relay Server 安全漏洞
Relay Server is an open-source system by System 3 that supports offline collaborative real-time document synchronization. There were security vulnerabilities in the Relay Server versions 0.9.0 to 0.9.6. These vulnerabilities stemmed from WebSocket endpoints for multiple documents, where WebSocket...
PT-2026-40422
Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were incorrectly treated as having full...
PT-2026-40314
Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. This issue has been patched in version 12.2.0...
PT-2026-40549
Name of the Vulnerable Software and Affected Versions UltraJSON versions prior to 5.12.1 Description A memory leak occurs when the ujson.dump function writes to a file-like object and the write operation raises an exception. The objToJSONFile function allocates a Python string object but fails to...
CVE-2026-31215
The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface. The DELETE /indexname/documents endpoint lacks proper authentication and authorization controls and does not validate the user-supplied pathorurl parameter...
PT-2026-40315
Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0...
MINI-8MR7-Q23R-WWM2
Bulletin has no description...