40763 matches found
PT-2026-57324
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, Grist contained two cross-site scripting vulnerabilities where an attacker-controlled value reached a link's href without scheme validation, so a javascript URL could run in a victim's Grist origin on a single...
CVE-2026-55659: Improper Neutralization of Input During Web Page Generation
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, several server-rendered Grist pages embedded user-controlled values into the page and into inline scripts without fully escaping them, allowing cross-site scripting. On the main application page, a document's nam...
PT-2026-57322
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, several server-rendered Grist pages embedded user-controlled values into the page and into inline scripts without fully escaping them, allowing cross-site scripting. On the main application page, a document's nam...
CVE-2026-59853
SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /api/storage/getCriteria endpoint returns saved search criteria from data/storage/criteria.json without the publish-access filtering used by sibling storage endpoints, allowing a publish-mode Reader to read private...
CVE-2026-59832
SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /snippets/filepath route handler serveSnippets in kernel/server/serve.go joins a single-decoded request path with the snippets directory without subpath containment or sensitive-path checks, allowing an authenticat...
CVE-2026-59832
SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /snippets/filepath route handler serveSnippets in kernel/server/serve.go joins a single-decoded request path with the snippets directory without subpath containment or sensitive-path checks, allowing an authenticat...
MINI-RR34-7V2J-V4X8
Bulletin has no description...
MINI-8R85-P5PX-PGRG
Bulletin has no description...
CGA-J986-W997-4353
Bulletin has no description...
MINI-WJWV-57R7-5RGH
Bulletin has no description...
MINI-67FM-29PH-WCCX
Bulletin has no description...
MINI-MJ6Q-9GHH-CMWV
Bulletin has no description...
ECHO-3172-F4D2-BCBC
Bulletin has no description...
ECHO-3C85-2C90-593F
Bulletin has no description...
MINI-8PHP-PHFH-3339
Bulletin has no description...
MINI-VR3V-6Q4Q-8P73
Bulletin has no description...
MINI-H56P-FW9M-8C8W
Bulletin has no description...
MINI-94J2-MWHR-2J8X
Bulletin has no description...