A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
CVE-2026-28978
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonom
2026-05-12 归档
今日共收录 1165 条安全情报，包含 386 个 CVE，425 篇安全通告，以及 70 篇研究论文。
← 返回归档列表An information leakage was addressed with additional validation. This issue is fixed in macOS...
CVE-2026-28976
An information leakage was addressed with additional validation. This issue is fixed in macOS Tahoe 26.5. An app may be
An issue in QuickJS-NG v.0.12.1 allows an attacker to execute arbitrary code via the...
CVE-2026-37630
An issue in QuickJS-NG v.0.12.1 allows an attacker to execute arbitrary code via the js_mapped_arguments_mark function
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia...
CVE-2026-28923
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14
A race condition was addressed with improved handling of symbolic links. This issue is fixed in...
CVE-2026-28924
A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Sequoia 15.7.7, ma
A use-after-free issue was addressed with improved memory management. This issue is fixed in...
CVE-2026-28946
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Tahoe 26.5. Processin
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS...
CVE-2026-28925
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma
A consistency issue was addressed with improved state handling. This issue is fixed in macOS...
CVE-2026-28919
A consistency issue was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonom
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
CVE-2026-28930
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.5. An app may be a
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia...
CVE-2026-28922
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14
A parsing issue in the handling of directory paths was addressed with improved path validation....
CVE-2026-28915
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m
This issue was addressed with improved permissions checking. This issue is fixed in macOS Tahoe...
CVE-2026-28910
This issue was addressed with improved permissions checking. This issue is fixed in macOS Tahoe 26.4. A malicious app ma
Gryph Agents Payload Filter Fails to Strip Tool Payload for Sensitive Content
CVE-2026-45046
Gryph implements logging levels that determine what content is logged to a local sqlite database. The README incorrectly
MantisBT Vulnerable to Stored XSS in File Download
CVE-2026-44657
Using *show_inline=1* parameter and a valid *file_show_inline_token* CSRF token on file_download.php, an attacker can ex
MantisBT has Stored XSS on Move Attachments Admin Page
CVE-2026-44655
Unescaped Project Name allows an attacker that can set it (which typically requires manager or administrator access leve
Kysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()`
CVE-2026-44635
## Summary Kysely 0.28.12 added a `sanitizeStringLiteral()` call inside `DefaultQueryCompiler.visitJSONPathLeg` (commit
local-deep-research is Vulnerable to HTML Injection via Unescaped User Input in PDF Export (`pdf_service.py:_markdown_to_html`)
CVE-2026-43979
## Summary `PDFService._markdown_to_html()` constructs an HTML document by interpolating user-controlled values — speci
MantisBT has a Private Bugnote Attachment Content Leak via REST API
CVE-2026-42071
A missing authorization check in MantisBT's file visibility function allows any authenticated user (REPORTER+) to downlo
MantisBT: Authorization Bypass in Bugnote Editing via Issue Update API
CVE-2026-42070
The mc_issue_update() function in MantisBT allows users having *update_bug_threshold* access (UPDATER, with default sett
MantisBT is Vulnerable to Reflected XSS in Rendering Dynamic Custom Textarea Field
CVE-2026-41897
Lack of validation of filter_target parameter on return_dynamic_filters.php (normally used as an AJAX in View Issues Pag