The Payconiq WordPress plugin through 1.0.4 does not check that a visitor is allowed to see an order before returning its confirmation link, allowing unauthenticated users to ob...

CVE-2026-103372

The Payconiq WordPress plugin through 1.0.4 does not check that a visitor is allowed to see an order before returning it

来源摘录 · NVD

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function...

CVE-2026-118272

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext.dispatchExpressionE

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext.dispatchExpressionError of the file renderers/web_core/src/v0_9/rendering/da...

CVE-2026-118272

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext.dispatchExpressionE

来源摘录 · NVD

MLflow CrewAI autologging records LLM provider API keys in logged trace spans

CVE-2026-116691

### Summary `mlflow.crewai.autolog()` leaks CrewAI LLM provider API keys into MLflow trace telemetry. When a CrewAI `A

历史摘要 · 未重新核验 · GitHub Advisory

Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

CVE-2026-116685

### Summary In affected versions, the SDK's Streamable HTTP and SSE client transports followed HTTP redirects to any hos

历史摘要 · 未重新核验 · GitHub Advisory

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 2.19.0 until 3.17.0, mlflow.crewai.autolog() records CrewAI...

CVE-2026-116691

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 2.

来源摘录 · NVD

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.8.0 until 1.30.0 and 2.2.0, streamable_http_client, strea...

CVE-2026-116685

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.

来源摘录 · NVD

The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the table before returnin...

CVE-2026-82983

The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user

历史摘要 · 未重新核验 · NVD

rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert

In rustls 0.23.44 and 0.23.45, application data that a client buffers before the handshake completes is sent to the serv

历史摘要 · 未重新核验 · GitHub Advisory

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allows unauthenticated visitors to read /__clockwork/ profile...

CVE-2026-117604

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allo

历史摘要 · 未重新核验 · NVD

Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback

CVE-2026-117604

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allo

历史摘要 · 未重新核验 · OSV.dev

An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information

CVE-2026-107067

An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information

来源摘录 · NVD

OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level...

CVE-2026-116819

OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain

历史摘要 · 未重新核验 · GitHub Advisory

OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level...

CVE-2026-116805

OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this...

CVE-2026-116507

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function

历史摘要 · 未重新核验 · GitHub Advisory

OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain argon2id hashes of ingestion credentials through the cli...

CVE-2026-116805

OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain

历史摘要 · 未重新核验 · NVD

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation ...

CVE-2026-116507

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function

历史摘要 · 未重新核验 · NVD

Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, _build_session_scope() in mem0/memory/main.py...

CVE-2026-116575

Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript

历史摘要 · 未重新核验 · NVD

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.

CVE-2026-113908

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be

来源摘录 · NVD

An information disclosure issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sensitive user data.

CVE-2026-112617

An information disclosure issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2. An app

来源摘录 · NVD