MINI-3X2Q-CXMQ-J734

Bulletin has no description...

MINI-MWHW-W3PM-7RMR

Bulletin has no description...

MINI-2P2J-MG6C-3HJQ

Bulletin has no description...

MINI-2J33-FPCQ-W77W

Bulletin has no description...

MINI-2FJF-6F85-558X

Bulletin has no description...

MINI-QFQP-XJF4-284Q

Bulletin has no description...

CVE-2026-19822

creationtimestamp| type| source ---|---|--- 2026-08-14 13:30:26+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mt2bdfwneg2z...

CVE-2026-72836

creationtimestamp| type| source ---|---|--- 2026-08-14 13:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt27o7uejz26 2026-08-14 13:06:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hiobi5qimz7ko 2026-08-14 13:20:05+00:00| seen|...

CVE-2026-73049

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getAttributeViewBacklinks endpoint that consults the forbidden access list instead of the visibility list when filtering backlinks. Anonymous readers can supply a publicly visible database row identifier to...

CVE-2026-73630

SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/filetree/authFilePublishAccess endpoint, which is registered with CheckAuth only and is reachable anonymously. The endpoint never sets a failure code, so its outcome is signalled entirely by the response message and...

CVE-2026-73048

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getRefIDsByFileAnnotationID endpoint that returns block identifiers citing PDF annotations without publish-access filtering. Attackers can extract block identifiers from restricted documents by supplying annotati...

CVE-2026-72814

The actix-files crate actixfiles before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the servefrom argument to Files::new, the mount path defaults to an empty path; the service then joins the request path with this empty path and...

RLSA-2026:54541 Important: .NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

RLSA-2026:54590 Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

CVE-2026-56859

creationtimestamp| type| source ---|---|--- 2026-08-14 12:01:10+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mt24drpyoo2x 2026-08-22 12:01:19+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mtoa3canjo2n...

CVE-2026-73630

SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/filetree/authFilePublishAccess endpoint, which is registered with CheckAuth only and reachable anonymously. The endpoint does not return a failure code; its outcome is signalled solely by the response message and th...

CVE-2026-73630

SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/filetree/authFilePublishAccess endpoint, which is registered with CheckAuth only and is reachable anonymously. The endpoint never sets a failure code, so its outcome is signalled entirely by the response message and...

EUVD-2026-58620

SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/filetree/authFilePublishAccess endpoint, which is registered with CheckAuth only and is reachable anonymously. The endpoint never sets a failure code, so its outcome is signalled entirely by the response message and...

CVE-2026-73630 SiYuan before v3.7.4 Information Disclosure via authFilePublishAccess

SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/filetree/authFilePublishAccess endpoint, which is registered with CheckAuth only and is reachable anonymously. The endpoint never sets a failure code, so its outcome is signalled entirely by the response message and...

CVE-2026-73049

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getAttributeViewBacklinks endpoint that consults the forbidden access list instead of the visibility list when filtering backlinks. Anonymous readers can supply a publicly visible database row identifier to...