11 matches found
EUVD-2024-51982
Malicious code in bioql PyPI...
CVE-2024-53504
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...
CVE-2024-53504
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...
CVE-2024-53504
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...
CVE-2024-53504
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...
PT-2024-35764
Name of the Vulnerable Software and Affected Versions Siyuan version 3.1.11 Description A SQL injection issue has been identified in the notebook parameter through the "/searchHistory" API endpoint. This allows for potential exploitation. No information is provided about the estimated number of...
CVE-2024-53504
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...
CVE-2024-53504
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...
Siyuan 安全漏洞
SiYuan is a privacy-first personal knowledge management system from SiYuan open source. A security vulnerability exists in Siyuan version 3.1.11, which stems from an SQL injection vulnerability contained in the notebook parameter of the /searchHistory file...
CVE-2024-53504
A SQL injection vulnerability exists in Siyuan version 3.1.11 . The flaw is triggered through the notebook parameter in the /searchHistory file. This vulnerability allows for the improper neutralization of special elements used in an SQL command. Exploitation details or specific remediation steps...
CVE-2024-53504: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...