| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-74801 | SiYuan before 3.7.4 Local Privilege Escalation via elevator.exe | siyuan-note | siyuan | High | 8.2 | 2026-08-17 11:04:37 | Deep Dive |
| CVE-2026-74802 | SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy | siyuan-note | siyuan | High | 8.2 | 2026-08-17 11:04:37 | Deep Dive |
| CVE-2026-74800 | SiYuan before v3.7.4 Stored XSS via assets endpoint | siyuan-note | siyuan | Critical | 9.0 | 2026-08-17 11:04:36 | Deep Dive |
| CVE-2026-74798 | SiYuan kernel Path Traversal via database_clean MCP tool | siyuan-note | siyuan | High | 8.7 | 2026-08-17 11:04:35 | Deep Dive |
| CVE-2026-74799 | SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosure | siyuan-note | siyuan | Critical | 9.3 | 2026-08-17 11:04:35 | Deep Dive |
| CVE-2026-74842 | Kira-Pgr PromptShopMCP Image-Toolkit-MCP-Server server.py download_image server-side request forgery | Kira-Pgr | PromptShopMCP | Medium | 6.3 | 2026-08-17 10:30:11 | Deep Dive |
| CVE-2026-74845 | 2100 Technology｜Official Document Management System - Arbitrary File Upload | 2100 Technology | Official Document Management System | High | 8.8 | 2026-08-17 09:53:44 | Deep Dive |
| CVE-2026-49303 | 通知模块权限控制漏洞影响可用性 | Huawei | HarmonyOS | Medium | 5.1 | 2026-08-17 08:53:08 | Deep Dive |
| CVE-2026-49301 | Gallery模块权限控制漏洞 | Huawei | HarmonyOS | Medium | 6.2 | 2026-08-17 08:45:47 | Deep Dive |
| CVE-2026-49305 | WiFi增强模块权限控制漏洞影响可用性 | Huawei | HarmonyOS | Medium | 6.2 | 2026-08-17 08:33:01 | Deep Dive |
| CVE-2026-49308 | 剪贴板模块权限控制漏洞影响服务机密性 | Huawei | HarmonyOS | Medium | 5.5 | 2026-08-17 08:27:44 | Deep Dive |
| CVE-2026-49306 | time模块UAF漏洞，影响可用性 | Huawei | HarmonyOS | Low | 3.3 | 2026-08-17 08:26:11 | Deep Dive |
| CVE-2026-49304 | 设备密钥管理权限控制漏洞影响可用性 | Huawei | HarmonyOS | Medium | 6.2 | 2026-08-17 08:23:31 | Deep Dive |
| CVE-2026-49302 | 通知服务模块权限控制漏洞，影响软件保密性 | Huawei | HarmonyOS | Medium | 6.2 | 2026-08-17 08:21:18 | Deep Dive |
| CVE-2026-58561 | Image Codec空指针解引用漏洞 | Huawei | HarmonyOS | Medium | 4.0 | 2026-08-17 08:18:33 | Deep Dive |
| CVE-2026-58560 | 图像编解码模块空指针解引用漏洞 | Huawei | HarmonyOS | Medium | 4.0 | 2026-08-17 08:16:17 | Deep Dive |
| CVE-2026-49307 | 多模式输入模块权限控制漏洞影响机密性 | Huawei | HarmonyOS | Medium | 6.2 | 2026-08-17 08:14:43 | Deep Dive |
| CVE-2026-20000 | itsourcecode Hospital Management System viewprescriptionrecord.php sql injection | itsourcecode | Hospital Management System | Medium | 6.3 | 2026-08-17 07:45:09 | Deep Dive |
| CVE-2026-19999 | Open Asset Import Library Assimp 3DGS MDL7 Bone Transformation Key MDLLoader.cpp ParseBoneTrafoKeys_3DGS_MDL7 buffer overflow | Open Asset Import Library Assimp | Assimp | Medium | 6.3 | 2026-08-17 07:30:12 | Deep Dive |
| CVE-2026-19998 | code-projects Online Shopping System offersmail.php cross site scripting | code-projects | Online Shopping System | Medium | 4.3 | 2026-08-17 07:15:10 | Deep Dive |