This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vendor Profiles

siyuan-note

Number 81 by total vulnerabilities in the catalog.

Computed from the whole catalog when the site is built.

Compare with another vendor

Total vulnerabilities

220

Critical

41

High

92

Known Exploited

0

Exploit available

0

Network, no login needed

54.1%

Of 220 scored records

New vulnerabilities per year, by severity
  • Critical
  • High
  • Medium
  • Low
  • None or not scored
Show as table
PeriodTotalCriticalHighMediumLowNone or not scored
2026 (incomplete)21341878410
2025302100
2024403100

Top products

ProductTotalCritical/High
siyuan220133

Top bug types

Bug typeTotalCritical/High
Cross-Site Scripting6149
Missing Authorization3411
Path Traversal3121
SQL Injection1211
Information Disclosure92
Incorrect Authorization82
Insecure Direct Object Reference70
Authentication Issues53
Allocation of Resources Without Limits or Throttling42
Improper Restriction of Excessive Authentication Attempts44

Newest vulnerabilities

CVETitlePublishedSeverityEPSS
CVE-2026-123492SiYuan before 3.8.9 Nil Pointer Dereference DoS via MCP resources/readMedium0.3%
CVE-2026-118680SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT AliasMedium0.5%
CVE-2026-116171SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length PrefixMedium0.5%
CVE-2026-116170SiYuan before v3.8.7 SQL Injection via History Search op and queryMedium0.4%
CVE-2026-116169SiYuan 2.10.0 before 3.8.7 Stored XSS via KaTeX \href in Math BlocksMedium0.2%
CVE-2026-116168SiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset ToolMedium0.2%
CVE-2026-116167SiYuan 2.9.0 before 3.8.7 XSS via check-auth to ParameterMedium0.7%
CVE-2026-116166SiYuan 3.6.0 before 3.8.7 Cleartext Transmission via Unenforced networkServeTLS SettingMedium0.1%
CVE-2026-109310SiYuan v3.1.12 before v3.8.6 Denial of Service via getDynamicIcon TemplateMedium0.4%
CVE-2026-109309SiYuan v3.7.0 before v3.8.6 Arbitrary File Read via Plugin ResponseFile.PathMedium0.4%