A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able t...

CVE-2026-64738

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonom

历史摘要 · 未重新核验 · NVD

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be a...

CVE-2026-64737

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS

历史摘要 · 未重新核验 · NVD

This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. An attacker with physical access may be able to access sensitive use...

CVE-2026-64732

This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. An attacker

历史摘要 · 未重新核验 · NVD

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user...

CVE-2026-64723

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macO

历史摘要 · 未重新核验 · NVD

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to bre...

CVE-2026-64702

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS S

历史摘要 · 未重新核验 · NVD

An access issue was addressed with improved access restrictions. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchO...

CVE-2026-43821

An access issue was addressed with improved access restrictions. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS

历史摘要 · 未重新核验 · NVD

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.6. An app may be able to access sensitive user data.

CVE-2026-43819

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.6. An app may

历史摘要 · 未重新核验 · NVD

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to intercept netwo...

CVE-2026-43779

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8

历史摘要 · 未重新核验 · NVD

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to read...

CVE-2026-43763

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.8, macOS So

历史摘要 · 未重新核验 · NVD

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access user-sensitive data.

CVE-2026-43760

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe

历史摘要 · 未重新核验 · NVD

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to...

CVE-2026-28945

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, mac

历史摘要 · 未重新核验 · NVD

An access control vulnerability in the mobile app (APK v5.5.0) for Ghost Robotics' Vision 60 robot allows multiple simultaneous sessions to run without proper client validation ...

CVE-2026-12990

An access control vulnerability in the mobile app (APK v5.5.0) for Ghost Robotics' Vision 60 robot allows multiple simul

历史摘要 · 未重新核验 · NVD

The Download Manager WordPress plugin before 3.3.62 does not bind its temporary download token to the requesting session nor expire it promptly, making the token a long-lived, m...

CVE-2026-14235

The Download Manager WordPress plugin before 3.3.62 does not bind its temporary download token to the requesting session

历史摘要 · 未重新核验 · NVD

A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserNavigationAllowed of the file src/browser/navigation-guard...

CVE-2026-17457

CVE-2026-17457 是一个影响 mf-yang openclaw-cn 项目（版本 <= 0.2.1）的信息泄露漏洞。该漏洞位于 src/browser/navigation-guard.ts 文件中的 assertBrowser

历史摘要 · 未重新核验 · NVD

mf-yang openclaw-cn Scheme navigation-guard.ts assertBrowserNavigationAllowed information disclosure

CVE-2026-17457

A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserN

历史摘要 · 未重新核验 · OSV.dev

A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins/platforms/simplex...

CVE-2026-17432

CVE-2026-17432 是 NousResearch hermes-agent 2026.6.5 版本中的一个高危漏洞。漏洞位于 hermes-agent/plugins/platforms/simplex/adapter.py 文件

历史摘要 · 未重新核验 · NVD

Poweradmin: Broken access control (IDOR): any zone owner can modify DNS records in zones they do not own

## Affected software - Product: Poweradmin (web front-end for PowerDNS) - Version tested: master, commit 7f28c3a97 (als

历史摘要 · 未重新核验 · GitHub Advisory

Improper access control in Azure API Management (APIM) allows an authorized attacker to execute...

CVE-2026-35425

Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · GitHub Advisory

Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension...

CVE-2026-65759

Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 - Critical

历史摘要 · 未重新核验 · GitHub Advisory

JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)

The extension allowlist/blocklist check inside `PyPIExtensionManager.install()` was not enforced due to a missing await.

历史摘要 · 未重新核验 · GitHub Advisory