2026

SiYuan versions before 3.7.4 contain an unthrottled brute-force vulnerability in the Publish Service Basic Auth implemen

SiYuan versions before 3.7.4 contain a cross-site request forgery vulnerability in the session-cookie authentication bra

A vulnerability was found in Kira-Pgr PromptShopMCP up to 5bc0cd17358e19a5415d11a531088170d7b81452. Affected is the func

SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy

SiYuan before 3.7.4 fails to properly escape workspace directory paths when constructing command-line arguments for the

SiYuan before v3.7.4 fails to set Content-Disposition and X-Content-Type-Options headers when serving arbitrary file ass

SiYuan before 3.7.4 registers Go net/http/pprof debug endpoints including heap and goroutine dumps without authenticatio

SiYuan kernel before v3.7.4 contains a path traversal vulnerability in the database_clean MCP tool. The tool performs on

Official Document Management System developed by 2100 Technology has an Arbitrary File Upload vulnerability, allowing au

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affe

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affe

Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affe

Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability m

UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect ava

Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability

Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerabil

Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may a

Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerabili

Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect

A vulnerability was detected in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function

A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is t

A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user to

A security flaw has been discovered in Webkul Bagisto up to 2.4.4. This issue affects some unknown processing of the fil

A vulnerability was identified in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin

A vulnerability was determined in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /customer/account

A vulnerability was found in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the fil

A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps (Chronicle SOAR) versions p

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: fix mask build for partial

A vulnerability has been found in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality

A flaw has been found in Orange View Limited DualSafe Password Manager & Digital Vault Extension up to 1.4.35 on Chrome.

A vulnerability was detected in Alaev SEO Tools Extension up to 1.0.10 on Chrome. This impacts the function addDiv of th

A security vulnerability has been detected in SourceCodester Best Employee Management System 1.0. This affects an unknow

The ShopSmart Loyalty for WooCommerce WordPress plugin through 1.0.0 does not perform any authorization or ownership che

The WooMS WordPress plugin through 9.14 does not validate a user-supplied URL before using it in a server-side request a

A weakness has been identified in Adblock for Youtube Extension up to 7.2.1 on Chrome. The impacted element is the funct

A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function get_images of the

A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This iss

A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code o

A weakness has been identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500

A security flaw has been discovered in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, M

A vulnerability was identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500

A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted eleme

A security vulnerability has been identified in Planet9 due to incorrect file permissions assigned to an application exe

A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key perm

A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon_check_session_ur

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub_44A968 of the file /

A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file ap

A security flaw has been discovered in treefrogframework treefrog-framework up to 2.11.2. This vulnerability affects the

A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown f