95476 matches found
CVE-2026-76223
ArcadeDB com.arcadedb versions 26.7.3 and earlier fail to enforce the UPDATESCHEMA permission check when a DEFINE FUNCTION statement targets an already-existing function library. A user with only database access can add or overwrite SQL or Cypher functions in an existing library and persist the...
CVE-2026-75916
SiYuan through 3.7.3 contains a cross-site scripting vulnerability in the '' block-reference autocomplete hint popup. In genHintItemHTML app/src/protyle/hint/extend.ts, a candidate block's name, alias, and memo fields are concatenated into the popup's HTML without escaping. An attacker who can se...
CVE-2026-65611
nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim enters that directory in nnn and uses the batch copy or move workflow, the...
CVE-2026-76215 phpMyFAQ before 4.1.7 Missing Authorization via child resources
phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unauthenticated attackers can retrieve restricted comment text, commenter email addresses, and attachment filenames for FAQ records they cannot directly access by...
CVE-2026-76215 phpMyFAQ before 4.1.7 Missing Authorization via child resources
phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unauthenticated attackers can retrieve restricted comment text, commenter email addresses, and attachment filenames for FAQ records they cannot directly access by...
CVE-2026-76215 phpMyFAQ before 4.1.7 Missing Authorization via child resources
phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unauthenticated attackers can retrieve restricted comment text, commenter email addresses, and attachment filenames for FAQ records they cannot directly access by...
ECHO-9151-32E7-325F
Bulletin has no description...
MINI-PW26-36QR-W87G
Bulletin has no description...
MINI-97P5-4X2R-9297
Bulletin has no description...
MINI-QRF6-GGC7-QMPX
Bulletin has no description...
MINI-7C2M-PHM6-CHMH
Bulletin has no description...
MINI-CMG4-CFFF-9MQJ
Bulletin has no description...
MINI-8V3M-X55V-2RJ9
Bulletin has no description...
MINI-HHGW-9MWJ-PRPX
Bulletin has no description...
MINI-XWWC-Q3C7-9MCC
Bulletin has no description...
MINI-Q3VJ-V22J-QVRH
Bulletin has no description...
MINI-JM2R-36X3-H469
Bulletin has no description...
MINI-F9MV-FWM9-4HWQ
Bulletin has no description...