InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,488 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,488
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product siyuan_note:siyuan. Show all products

134 CVEs, showing 1 to 50Page 1 of 3Next
CVESeverityTitlePublished
CVE-2026-65607Medium 6.5SiYuan before v3.7.2 Path Traversal via /export/temp/
Assigned by VulnCheck
Jul 23, 2026
CVE-2026-66394High 8.7SiYuan before v3.7.3 Stored and Reflected XSS via SVG Sanitizer Bypass
Assigned by VulnCheck
Jul 27, 2026
CVE-2026-68584High 8.6SiYuan before v3.7.3 Authentication Bypass via Content Endpoints
Assigned by VulnCheck
Aug 3, 2026
CVE-2026-68585Medium 5.8SiYuan before v3.7.3 Metadata Disclosure via getBlockInfo
Assigned by VulnCheck
Aug 3, 2026
CVE-2026-68586High 8.6SiYuan before v3.7.3 Content Disclosure via getBacklinkDoc
Assigned by VulnCheck
Aug 3, 2026
CVE-2026-68587High 8.6SiYuan before v3.7.3 Information Disclosure via getHeading*Transaction
Assigned by VulnCheck
Aug 3, 2026
CVE-2026-69083Critical 10.0SiYuan before v3.7.3 SQL Injection via fullTextSearchAssetContent
Assigned by VulnCheck
Aug 3, 2026
CVE-2026-69084Critical 10.0SiYuan before v3.7.3 SQL Injection via searchEmbedBlock
Assigned by VulnCheck
Aug 3, 2026
CVE-2026-69085Critical 10.0SiYuan before v3.7.3 SQL Injection via searchDocs
Assigned by VulnCheck
Aug 3, 2026
CVE-2026-69086High 7.7SiYuan before v3.7.3 Path Traversal via unvalidated avID
Assigned by VulnCheck
Aug 3, 2026
CVE-2026-72788Medium 5.8SiYuan before v3.7.4 Information Disclosure via UILayout Filter
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72789High 8.6SiYuan before v3.7.4 Authentication Bypass via Encrypted Notebooks
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72790Medium 5.8SiYuan before v3.7.4 Information Disclosure via getNotebookInfo
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72791Medium 5.8SiYuan before v3.7.4 Information Disclosure via getAttributeViewFieldViews
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72792Medium 5.8SiYuan before v3.7.4 Information Disclosure via Tag API
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72793High 8.6SiYuan before v3.7.4 Information Disclosure via /api/system/getConf
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72794High 8.6siyuan before v3.7.4 Session Cookie Key Disclosure via getConf
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72795High 8.6SiYuan before v3.7.4 Information Disclosure via Embed Block
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72796Medium 5.8SiYuan before v3.7.4 Access Control Bypass via Static Routes
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72797Medium 5.8SiYuan before v3.7.4 Information Disclosure via getEncryptedNotebookStatus
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72798High 8.6SiYuan before v3.7.4 Information Disclosure via renderAttributeView
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72799Medium 5.8SiYuan before v3.7.4 Information Disclosure via Path Resolution
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72800Medium 5.8SiYuan before v3.7.4 Information Disclosure via Unfiltered API
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72801High 7.5SiYuan before v3.7.4 Information Disclosure via Encryption Key Material
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72802Medium 5.3SiYuan before v3.7.4 Information Disclosure via resolveAssetPath
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72803Medium 5.8SiYuan before v3.7.4 Information Disclosure via getBlockAttrs
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72804High 8.6SiYuan before v3.7.4 Authentication Bypass via Graph Endpoints
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72805Medium 5.8SiYuan before v3.7.4 Information Disclosure via Block Endpoints
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72806Medium 5.8SiYuan before v3.7.4 Authentication Bypass via Attribute View
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72807High 8.0SiYuan before v3.7.4 SQL Injection via queryBlocks template
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72808Medium 5.8SiYuan before v3.7.4 Information Disclosure via getFileAnnotation
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-72809High 8.0SiYuan before v3.7.4 Authentication Bypass via Localhost Trust
Assigned by VulnCheck
Aug 12, 2026
CVE-2026-73605Medium 5.8SiYuan before v3.7.4 Path Traversal via getUniqueFilename
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-73606Medium 5.8SiYuan before v3.7.4 Information Disclosure via getRefIDs
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-73607Medium 5.8SiYuan before v3.7.4 Information Disclosure via getOutlineStorage
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-73608High 8.6SiYuan before v3.7.4 Authorization Bypass via getAttributeViewSearchTarget
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-73609Medium 5.8SiYuan before v3.7.4 Information Disclosure via getBookmarkLabels
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-73610Medium 5.8SiYuan before v3.7.4 Information Disclosure via Local Storage
Assigned by VulnCheck
Aug 13, 2026
CVE-2026-72810High 8.6SiYuan before v3.7.4 Publish-Boundary Bypass via WebSocket
Assigned by VulnCheck
Aug 14, 2026
CVE-2026-72811Critical 10.0SiYuan before v3.7.4 SQL Injection via backlink search
Assigned by VulnCheck
Aug 14, 2026
CVE-2026-72812Medium 6.5SiYuan before v3.7.4 Missing Authorization via refreshBacklink
Assigned by VulnCheck
Aug 14, 2026
CVE-2026-73048Medium 5.8SiYuan before v3.7.4 Information Disclosure via getRefIDsByFileAnnotationID
Assigned by VulnCheck
Aug 14, 2026
CVE-2026-73049Medium 5.8SiYuan before v3.7.4 Information Disclosure via getAttributeViewBacklinks
Assigned by VulnCheck
Aug 14, 2026
CVE-2026-73630Medium 5.8SiYuan before v3.7.4 Information Disclosure via authFilePublishAccess
Assigned by VulnCheck
Aug 14, 2026
CVE-2026-73041Critical 9.0SiYuan before v3.7.4 Remote Code Execution via PDF Annotations
Assigned by VulnCheck
Aug 15, 2026
CVE-2026-73042Critical 9.0SiYuan before v3.7.4 Remote Code Execution via Menu Metadata
Assigned by VulnCheck
Aug 15, 2026
CVE-2026-73043Critical 9.0SiYuan before v3.7.4 Remote Code Execution via Template Calculation
Assigned by VulnCheck
Aug 15, 2026
CVE-2026-73044Critical 9.0SiYuan before v3.7.4 Stored Cross-Site Scripting via Column Width
Assigned by VulnCheck
Aug 15, 2026
CVE-2026-73045High 7.5SiYuan before 3.7.4 Brute-Force via authFilePublishAccess
Assigned by VulnCheck
Aug 15, 2026
CVE-2026-73046Critical 9.8SiYuan before v3.7.4 Authentication Bypass via HTTP Basic Auth
Assigned by VulnCheck
Aug 15, 2026
Page 1 of 3Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.