A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access user-sensi...

CVE-2026-43756

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8,

历史摘要 · 未重新核验 · NVD

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able...

CVE-2026-43754

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.7.8,

历史摘要 · 未重新核验 · NVD

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app...

CVE-2026-43730

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS T

历史摘要 · 未重新核验 · NVD

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to access sens...

CVE-2026-20672

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.7.

历史摘要 · 未重新核验 · NVD

Build readers can access another repository's environment properties. A caller with read access to an ordinary repository can select a readable repository parameter while retrie...

CVE-2026-66018

Build readers can access another repository's environment properties. A caller with read access to an ordinary repositor

历史摘要 · 未重新核验 · NVD

An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions.

CVE-2026-42017

An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged use

历史摘要 · 未重新核验 · NVD

Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version HC5.26.1.14.20260207 contains an audit log disclosure Vulnerability that could allow a...

CVE-2026-17612

Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version HC5.26.1.14.20260207 contains

历史摘要 · 未重新核验 · NVD

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMa...

CVE-2026-45623

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract

历史摘要 · 未重新核验 · NVD

The Quiz and Survey Master (QSM) WordPress plugin before 11.1.3 does not implement rate limiting or standard failed-login auditing on its front-end credential-check functionali...

CVE-2026-14820

The Quiz and Survey Master (QSM) WordPress plugin before 11.1.3 does not implement rate limiting or standard failed-log

历史摘要 · 未重新核验 · NVD

A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the...

CVE-2026-17457

A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserN

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserNavigationAllowed of the file src/browser/navigation-guard...

CVE-2026-17457

CVE-2026-17457 是一个影响 mf-yang openclaw-cn 项目（版本 <= 0.2.1）的信息泄露漏洞。该漏洞位于 src/browser/navigation-guard.ts 文件中的 assertBrowser

历史摘要 · 未重新核验 · NVD

mf-yang openclaw-cn Scheme navigation-guard.ts assertBrowserNavigationAllowed information disclosure

CVE-2026-17457

A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserN

历史摘要 · 未重新核验 · OSV.dev

Shescape: Home-directory disclosure in assignment context on Unix with Dash

### Impact This impacts users of Shescape on Unix systems that explicitly configure `shell` to Dash, or `true` when the

历史摘要 · 未重新核验 · GitHub Advisory

OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search

### Summary An authorization bypass and information disclosure vulnerability exists in the search API of `Openlist`. Due

历史摘要 · 未重新核验 · GitHub Advisory

Hubuum client library (Rust): Authenticated requests may escape the configured base path through redirects

## Impact The built-in async and blocking clients used reqwest's default redirect policy. `BaseUrl` constrains the init

历史摘要 · 未重新核验 · GitHub Advisory

GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)

## Summary The fix for [GHSA-rwj8-pgh3-r573](https://github.com/gitpython-developers/GitPython/security/advisories/GHSA

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: OAuth2 Token Disclosure via Automation Test Results Broadcast to Other Builders

## Summary When an SSO-authenticated user tests an automation in the Budibase builder, their OAuth2 access token and re

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: Unauthenticated user information disclosure via public tenant user lookup endpoint

#### Summary The Budibase Worker service exposes a public, unauthenticated API endpoint (`GET /api/global/users/tenant/:

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth Leak

## Summary Budibase attaches a REST datasource's stored credentials (Bearer/Basic tokens and static headers) to an outgo

历史摘要 · 未重新核验 · GitHub Advisory

Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoints to Power-Role Users

## Summary The `/api/users/metadata` and `/api/users/metadata/:id` endpoints in `@budibase/server` return full global u

历史摘要 · 未重新核验 · GitHub Advisory