Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

siyuan-note Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Affected product	Published	Severity
`CVE-2026-87815`SiYuan before v3.8.2 Path Traversal via removeRiffDeck	Exploitation statusNot confirmed	FixYes	Affected productsiyuan	Published09/09/2026	SeverityHigh
`CVE-2026-87814`SiYuan before v3.8.2 Stored XSS via Asset Preview	Exploitation statusNot confirmed	FixYes	Affected productsiyuan	Published09/09/2026	SeverityHigh
`CVE-2026-87813`SiYuan before v3.8.2 Stored XSS via unescaped asset filenames	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published09/09/2026	SeverityHigh
`CVE-2026-87812`SiYuan before v3.8.2 Stored XSS via Bazaar iconURL	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published09/09/2026	SeverityHigh
`CVE-2026-87811`SiYuan before v3.8.2 Stored XSS via notebook template paths	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published09/09/2026	SeverityHigh
`CVE-2026-87810`Siyuan before v3.8.2 Information Disclosure via fullTextSearchBlock	Exploitation statusNot confirmed	FixYes	Affected productsiyuan	Published09/09/2026	SeverityMedium
`CVE-2026-87809`Siyuan before v3.8.2 Information Disclosure via Export Preview	Exploitation statusNot confirmed	FixYes	Affected productsiyuan	Published09/09/2026	SeverityHigh
`CVE-2026-87808`SiYuan before v3.8.2 Read-Only Boundary Bypass via fullTextSearchBlock	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published09/09/2026	SeverityHigh
`CVE-2026-87807`siyuan before v3.8.2 SQL Injection via fullTextSearchBlock	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published09/09/2026	SeverityHigh
`CVE-2026-86712`SiYuan before 3.8.2 Remote Code Execution via Clipboard	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published09/08/2026	SeverityHigh
`CVE-2026-86192`SiYuan before v3.8.2 Information Disclosure via Attribute-View	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published09/05/2026	SeverityHigh
`CVE-2026-86191`SiYuan before v3.8.2 Private Attribute View Key Enumeration	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published09/05/2026	SeverityMedium
`CVE-2026-85585`SiYuan before v3.8.2 Unbounded Memory Consumption via ControlConcurrency	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published09/04/2026	SeverityHigh
`CVE-2026-85584`SiYuan before v3.8.2 Denial of Service via Auth Throttle	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published09/04/2026	SeverityHigh
`CVE-2026-85583`SiYuan before v3.8.2 Path Traversal via symlink in file API	Exploitation statusNot confirmed	FixYes	Affected productsiyuan	Published09/04/2026	SeverityHigh
`CVE-2026-85582`SiYuan before v3.8.2 Unbounded Session Creation via Basic Auth	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published09/04/2026	SeverityHigh
`CVE-2026-85581`SiYuan before v3.8.2 Denial of Service via unauthenticated UI-process registration	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published09/04/2026	SeverityHigh
`CVE-2026-85580`SiYuan before v3.8.2 Path Guard Bypass via Case Mismatch	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published09/04/2026	SeverityHigh
`CVE-2026-85579`SiYuan before v3.8.2 Information Disclosure via undoState	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published09/04/2026	SeverityMedium
`CVE-2026-85578`SiYuan through 3.8.1 Authorization Bypass via getFile	Exploitation statusNot confirmed	FixYes	Affected productsiyuan	Published09/04/2026	SeverityHigh
`CVE-2026-85175`SiYuan before v3.8.2 TLS Private Key Disclosure via getFile	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published09/03/2026	SeverityHigh
`CVE-2026-85174`SiYuan before v3.8.2 API Token Exposure via Log File	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published09/03/2026	SeverityHigh
`CVE-2026-84803`SiYuan before v3.8.2 Stored XSS via incomplete asset blocklist	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published09/02/2026	SeverityHigh
`CVE-2026-82654`SiYuan before v3.8.1 Stored XSS via block name	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/30/2026	SeverityCritical
`CVE-2026-82653`SiYuan before v3.8.1 Stored XSS via confirmDialog	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/30/2026	SeverityCritical
`CVE-2026-82652`SiYuan before v3.8.1 Information Disclosure via Publish Access	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/30/2026	SeverityMedium
`CVE-2026-82651`SiYuan before v3.8.1 Missing Authorization via /history and /repo/diff	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/30/2026	SeverityMedium
`CVE-2026-82650`SiYuan before v3.8.1 Path Traversal via /api/template/render	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/30/2026	SeverityMedium
`CVE-2026-82649`SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/30/2026	SeverityHigh
`CVE-2026-82234`SiYuan before v3.8.1 SSRF via DNS-Rebinding TOCTOU	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/28/2026	SeverityHigh
`CVE-2026-82233`SiYuan before v3.8.1 Path Traversal via asset.upload	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/28/2026	SeverityMedium
`CVE-2026-62204`SiYuan before v3.7.4 Plugin Overwrite via Bazaar Install	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/22/2026	SeverityMedium
`CVE-2026-60084`SiYuan before v3.7.4 Arbitrary File Deletion via removeTemplate	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/22/2026	SeverityHigh
`CVE-2026-60083`SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file tool	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/22/2026	SeverityMedium
`CVE-2026-59809`SiYuan before v3.8.0 Secret Exfiltration via http_request URL	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/22/2026	SeverityMedium
`CVE-2026-77086`SiYuan before v3.7.4 Path Traversal via packageName	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/21/2026	SeverityCritical
`CVE-2026-75917`SiYuan before v3.7.4 XSS-to-RCE via pathName.ts	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/19/2026	SeverityCritical
`CVE-2026-75916`SiYuan XSS-to-RCE via unescaped block metadata in hint popup	Exploitation statusPublic exploit	FixNot confirmed	Affected productsiyuan	Published08/19/2026	SeverityCritical
`CVE-2026-74906`SiYuan before v3.7.4 Incorrect Authorization via Publish Access	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/18/2026	SeverityHigh
`CVE-2026-74905`SiYuan before v3.7.4 SSRF via IPv6 Transition Address Bypass	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/18/2026	SeverityMedium
`CVE-2026-74904`SiYuan before v3.7.4 Missing Authorization via block API	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/18/2026	SeverityHigh
`CVE-2026-74903`SiYuan before v3.7.4 Insufficient Access Control via spinBlockDOM	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/18/2026	SeverityMedium
`CVE-2026-74902`SiYuan before v3.7.4 XSS-to-RCE via malicious filename upload	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/18/2026	SeverityCritical
`CVE-2026-74868`SiYuan before 3.7.4 Brute-Force Authentication via Publish Service	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/17/2026	SeverityHigh
`CVE-2026-74867`SiYuan before 3.7.4 Cross-Site Request Forgery via CheckAuth	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/17/2026	SeverityLow
`CVE-2026-74802`SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/17/2026	SeverityHigh
`CVE-2026-74801`SiYuan before 3.7.4 Local Privilege Escalation via elevator.exe	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/17/2026	SeverityHigh
`CVE-2026-74800`SiYuan before v3.7.4 Stored XSS via assets endpoint	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/17/2026	SeverityCritical
`CVE-2026-74799`SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosure	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/17/2026	SeverityCritical
`CVE-2026-74798`SiYuan kernel Path Traversal via database_clean MCP tool	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/17/2026	SeverityCritical
`CVE-2026-73056`SiYuan kernel before 3.7.4 Unthrottled Brute-Force via API Token	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/16/2026	SeverityCritical
`CVE-2026-73054`SiYuan before v3.7.4 Authentication Bypass via WebSocket	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/15/2026	SeverityHigh
`CVE-2026-73053`SiYuan before v3.7.4 Cross-Site Scripting via unicode2Emoji	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/15/2026	SeverityCritical
`CVE-2026-73052`SiYuan before v3.7.4 Stored XSS via Attribute-View Field Names	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/15/2026	SeverityCritical
`CVE-2026-73050`SiYuan before v3.7.4 Stored XSS via select option color	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/15/2026	SeverityCritical
`CVE-2026-73047`siyuan before v3.7.4 Server-Side Template Injection via attribute-view	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/15/2026	SeverityHigh
`CVE-2026-73046`SiYuan before v3.7.4 Authentication Bypass via HTTP Basic Auth	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/15/2026	SeverityCritical
`CVE-2026-73045`SiYuan before 3.7.4 Brute-Force via authFilePublishAccess	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/15/2026	SeverityHigh
`CVE-2026-73044`SiYuan before v3.7.4 Stored Cross-Site Scripting via Column Width	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/15/2026	SeverityCritical
`CVE-2026-73043`SiYuan before v3.7.4 Remote Code Execution via Template Calculation	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/15/2026	SeverityCritical
`CVE-2026-73042`SiYuan before v3.7.4 Remote Code Execution via Menu Metadata	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/15/2026	SeverityCritical
`CVE-2026-73041`SiYuan before v3.7.4 Remote Code Execution via PDF Annotations	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/15/2026	SeverityCritical
`CVE-2026-73630`SiYuan before v3.7.4 Information Disclosure via authFilePublishAccess	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/14/2026	SeverityMedium
`CVE-2026-73049`SiYuan before v3.7.4 Information Disclosure via getAttributeViewBacklinks	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/14/2026	SeverityMedium
`CVE-2026-73048`SiYuan before v3.7.4 Information Disclosure via getRefIDsByFileAnnotationID	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/14/2026	SeverityMedium
`CVE-2026-72812`SiYuan before v3.7.4 Missing Authorization via refreshBacklink	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/14/2026	SeverityMedium
`CVE-2026-72811`SiYuan before v3.7.4 SQL Injection via backlink search	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/14/2026	SeverityCritical
`CVE-2026-72810`SiYuan before v3.7.4 Publish-Boundary Bypass via WebSocket	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/14/2026	SeverityCritical
`CVE-2026-73610`SiYuan before v3.7.4 Information Disclosure via Local Storage	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/13/2026	SeverityMedium
`CVE-2026-73609`SiYuan before v3.7.4 Information Disclosure via getBookmarkLabels	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/13/2026	SeverityMedium
`CVE-2026-73608`SiYuan before v3.7.4 Authorization Bypass via getAttributeViewSearchTarget	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/13/2026	SeverityCritical
`CVE-2026-73607`SiYuan before v3.7.4 Information Disclosure via getOutlineStorage	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/13/2026	SeverityMedium
`CVE-2026-73606`SiYuan before v3.7.4 Information Disclosure via getRefIDs	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/13/2026	SeverityMedium
`CVE-2026-73605`SiYuan before v3.7.4 Path Traversal via getUniqueFilename	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/13/2026	SeverityMedium
`CVE-2026-72809`SiYuan before v3.7.4 Authentication Bypass via Localhost Trust	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/12/2026	SeverityHigh
`CVE-2026-72808`SiYuan before v3.7.4 Information Disclosure via getFileAnnotation	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/12/2026	SeverityMedium
`CVE-2026-72807`SiYuan before v3.7.4 SQL Injection via queryBlocks template	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/12/2026	SeverityHigh
`CVE-2026-72806`SiYuan before v3.7.4 Authentication Bypass via Attribute View	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/12/2026	SeverityMedium
`CVE-2026-72805`SiYuan before v3.7.4 Information Disclosure via Block Endpoints	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/12/2026	SeverityMedium
`CVE-2026-72804`SiYuan before v3.7.4 Authentication Bypass via Graph Endpoints	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/12/2026	SeverityCritical
`CVE-2026-72803`SiYuan before v3.7.4 Information Disclosure via getBlockAttrs	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/12/2026	SeverityMedium
`CVE-2026-72802`SiYuan before v3.7.4 Information Disclosure via resolveAssetPath	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/12/2026	SeverityMedium
`CVE-2026-72801`SiYuan before v3.7.4 Information Disclosure via Encryption Key Material	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/12/2026	SeverityHigh
`CVE-2026-72800`SiYuan before v3.7.4 Information Disclosure via Unfiltered API	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/12/2026	SeverityMedium
`CVE-2026-72799`SiYuan before v3.7.4 Information Disclosure via Path Resolution	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/12/2026	SeverityMedium
`CVE-2026-72798`SiYuan before v3.7.4 Information Disclosure via renderAttributeView	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/12/2026	SeverityCritical
`CVE-2026-72797`SiYuan before v3.7.4 Information Disclosure via getEncryptedNotebookStatus	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/12/2026	SeverityMedium
`CVE-2026-72796`SiYuan before v3.7.4 Access Control Bypass via Static Routes	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/12/2026	SeverityMedium
`CVE-2026-72795`SiYuan before v3.7.4 Information Disclosure via Embed Block	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/12/2026	SeverityCritical
`CVE-2026-72794`siyuan before v3.7.4 Session Cookie Key Disclosure via getConf	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/12/2026	SeverityCritical
`CVE-2026-72793`SiYuan before v3.7.4 Information Disclosure via /api/system/getConf	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/12/2026	SeverityCritical
`CVE-2026-72792`SiYuan before v3.7.4 Information Disclosure via Tag API	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/12/2026	SeverityMedium
`CVE-2026-72791`SiYuan before v3.7.4 Information Disclosure via getAttributeViewFieldViews	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/12/2026	SeverityMedium
`CVE-2026-72790`SiYuan before v3.7.4 Information Disclosure via getNotebookInfo	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/12/2026	SeverityMedium
`CVE-2026-72789`SiYuan before v3.7.4 Authentication Bypass via Encrypted Notebooks	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/12/2026	SeverityCritical
`CVE-2026-72788`SiYuan before v3.7.4 Information Disclosure via UILayout Filter	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/12/2026	SeverityMedium
`CVE-2026-69086`SiYuan before v3.7.3 Path Traversal via unvalidated avID	Exploitation statusNot known exploited	FixYes	Affected productsiyuan	Published08/03/2026	SeverityHigh
`CVE-2026-69085`SiYuan before v3.7.3 SQL Injection via searchDocs	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/03/2026	SeverityCritical
`CVE-2026-69084`SiYuan before v3.7.3 SQL Injection via searchEmbedBlock	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/03/2026	SeverityCritical
`CVE-2026-69083`SiYuan before v3.7.3 SQL Injection via fullTextSearchAssetContent	Exploitation statusPublic exploit	FixYes	Affected productsiyuan	Published08/03/2026	SeverityCritical

100 / 184 Results

Security vulnerabilities from siyuan-note

siyuan-note

CyStack could not complete this security profile. The original vulnerability records remain available below.

How many security vulnerabilities does siyuan-note have?

Which siyuan-note product has the most vulnerabilities?

Run an in-depth assessment with complete web risk management

Popular siyuan-note products

siyuan