|
1071
|
4.3 |
MEDIUM
Network
|
-
|
-
|
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, broken access control in the searchAsset, searchTag, searchWidget, and searchTemplate publish-mode Readers can enumerate…
|
CWE-863
Incorrect Authorization
|
CVE-2026-45148
|
2026-05-16 00:16 |
2026-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1072
|
7.5 |
HIGH
Network
|
-
|
-
|
libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciou…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2026-44673
|
2026-05-16 00:16 |
2026-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1073
|
- |
|
-
|
-
|
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the kernel stores Attribute View (AV / database) names without any HTML escape, then a render template uses raw strings.…
|
CWE-79
CWE-94
CWE-1188
Cross-site Scripting
Code Injection
Insecure Default Initialization of Resource
|
CVE-2026-44670
|
2026-05-16 00:16 |
2026-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1074
|
- |
|
-
|
-
|
HRConvert2 is a self-hosted, drag-and-drop & nosql file conversion server & share tool. Prior to 3.3.8, the sanitizeString() function in convertCore.php is missing backtick (`) and tab (\t) from its …
|
CWE-78
OS Command
|
CVE-2026-44666
|
2026-05-16 00:16 |
2026-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1075
|
- |
|
-
|
-
|
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, he tooltip mouseover handler in app/src/block/popover.ts reads aria-label via getAttribute and passes it through decode…
|
CWE-79
CWE-116
CWE-1188
Cross-site Scripting
Improper Encoding or Escaping of Output
Insecure Default Initialization of Resource
|
CVE-2026-44588
|
2026-05-16 00:16 |
2026-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1076
|
10.0 |
CRITICAL
Network
|
-
|
-
|
Note Mark is an open-source note-taking application. Prior to 0.19.4, no minimum length or entropy is enforced on the JWT_SECRET configuration value. The application accepts any base64-decodable secr…
|
CWE-326
CWE-345
Inadequate Encryption Strength
Insufficient Verification of Data Authenticity
|
CVE-2026-44523
|
2026-05-16 00:16 |
2026-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1077
|
- |
|
-
|
-
|
The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. From 1.1.0 to 1.7.4, the TrailingSlashMiddleware in internal/api/server.go is vulnerable to an ope…
|
CWE-601
Open Redirect
|
CVE-2026-44427
|
2026-05-16 00:16 |
2026-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1078
|
6.5 |
MEDIUM
Network
|
vllm
|
vllm
|
vLLM is an inference and serving engine for large language models (LLMs). From to before 0.20.0, the extract_hidden_states speculative decoding proposer in vLLM returns a tensor with an incorrect sh…
|
CWE-131
CWE-704
Incorrect Calculation of Buffer Size
Incorrect Type Conversion or Cast
|
CVE-2026-44223
|
2026-05-16 00:16 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1079
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Foscam VD1 Video Doorbell before V5.3.13_1072 is vulnerable to Cleartext Transmission of Sensitive Information. The device transmits sensitive Session Description Protocol (SDP), including ICE creden…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2026-38740
|
2026-05-16 00:16 |
2026-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1080
|
8.8 |
HIGH
Network
|
-
|
-
|
The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable to insecure deserialization (CW…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2026-31219
|
2026-05-16 00:16 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
