2 matches found
SiYuan 代码问题漏洞
SiYuan is a privacy-oriented personal knowledge management system developed by SiYuan itself. Versions of SiYuan prior to 3.6.4 contained code vulnerabilities. These vulnerabilities stemmed from insecure Mermaid.js configurations and the lack of secondary cleanup steps, which could lead to NTLMv2...
Mbed TLS 缓冲区错误漏洞
Mbed TLS is an open source, portable, easy to use, readable and flexible SSL library from Mbed TLS Open Source. A buffer error vulnerability exists in Mbed TLS versions prior to 3.6.4, which stems from a failure to check the input buffer size and can lead to out-of-bounds reads...