312977 matches found
CVE-2026-73049
SiYuan before v3.7.4 contains an information disclosure vulnerability in the getAttributeViewBacklinks endpoint, where filtering backlinks consults the forbidden access list instead of the visibility list. This allows anonymous readers to supply a publicly visible database row identifier and disc...
CVE-2026-73049 SiYuan before v3.7.4 Information Disclosure via getAttributeViewBacklinks
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getAttributeViewBacklinks endpoint that consults the forbidden access list instead of the visibility list when filtering backlinks. Anonymous readers can supply a publicly visible database row identifier to...
CVE-2026-73048
SiYuan before v3.7.4 contains an information disclosure vulnerability in the getRefIDsByFileAnnotationID endpoint, which returns block identifiers citing PDF annotations without publish-access filtering. Attackers can extract block identifiers from restricted documents by using annotation identif...
CVE-2026-73048 SiYuan before v3.7.4 Information Disclosure via getRefIDsByFileAnnotationID
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getRefIDsByFileAnnotationID endpoint that returns block identifiers citing PDF annotations without publish-access filtering. Attackers can extract block identifiers from restricted documents by supplying annotati...
CVE-2026-73048
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getRefIDsByFileAnnotationID endpoint that returns block identifiers citing PDF annotations without publish-access filtering. Attackers can extract block identifiers from restricted documents by supplying annotati...
EUVD-2026-58654
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getRefIDsByFileAnnotationID endpoint that returns block identifiers citing PDF annotations without publish-access filtering. Attackers can extract block identifiers from restricted documents by supplying annotati...
CVE-2026-72814 actix-web before 0.6.10 Information Disclosure via Files
The actix-files crate actixfiles before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the servefrom argument to Files::new, the mount path defaults to an empty path; the service then joins the request path with this empty path and...
CVE-2026-72814 actix-web before 0.6.10 Information Disclosure via Files
The actix-files crate actixfiles before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the servefrom argument to Files::new, the mount path defaults to an empty path; the service then joins the request path with this empty path and...
EUVD-2026-58629
The actix-files crate actixfiles before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the servefrom argument to Files::new, the mount path defaults to an empty path; the service then joins the request path with this empty path and...
CVE-2026-72814
The actix-files crate actixfiles before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the servefrom argument to Files::new, the mount path defaults to an empty path; the service then joins the request path with this empty path and...
CVE-2026-72814
The actix-files crate actixfiles before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the servefrom argument to Files::new, the mount path defaults to an empty path; the service then joins the request path with this empty path and...
CVE-2026-72814
The actix-files crate (actix_files) before version 0.6.10 contains an information exposure vulnerability. If serve_from is a non-existing folder in Files::new(), the mount path becomes empty and the service joins and canonicalizes the request path against this empty path, causing Rust to treat it...
CVE-2026-19813
creationtimestamp| type| source ---|---|--- 2026-08-14 09:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mszsbznr3s2m 2026-08-14 10:17:01+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mszwjkdt4k2h...
GO-2024-3246 vulnerabilities
Vulnerabilities for packages: vault...
GO-2024-3113 vulnerabilities
Vulnerabilities for packages: vault...
GO-2024-3271 vulnerabilities
Vulnerabilities for packages: rclone...
GO-2022-0574 vulnerabilities
Vulnerabilities for packages: opa...
GO-2026-4779 vulnerabilities
Vulnerabilities for packages: minio, minio-fips...