A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gat...

CVE-2026-28900

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma

历史摘要 · 未重新核验 · NVD

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks.

CVE-2026-28849

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A malici

历史摘要 · 未重新核验 · NVD

Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 throu...

CVE-2026-66391

Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket. This issue affects Ap

历史摘要 · 未重新核验 · NVD

Hubuum client library (Rust): Configured custom transports may be bypassed, exposing credentials and network traffic

## Summary When an application configures hubuum_client with ClientBuilder::with_transport, several client operations s

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching

CVE-2026-59223

## Summary The administrator-configured `WEB_FETCH_FILTER_LIST` (the allow/block list applied to server-side web fetche

历史摘要 · 未重新核验 · GitHub Advisory

n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector

CVE-2026-59207

## Impact The AI Agents feature did not enforce the "Allowed HTTP Request Domains" restriction configured on credentials

历史摘要 · 未重新核验 · GitHub Advisory

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, KVM exposes `ExecuteReadOnlyWithTypedArguments` as a read-only execution mechanism. The ho...

CVE-2026-46403

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, KVM exposes `ExecuteReadOnlyWithT

历史摘要 · 未重新核验 · NVD

Klever-Go KVM read-only execution can commit contract delete and upgrade side effects

CVE-2026-46403

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, KVM exposes `ExecuteReadOnlyWithT

历史摘要 · 未重新核验 · OSV.dev

HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the application in malicious pages and induce unauthorized user ac...

CVE-2026-56585

HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the appli

历史摘要 · 未重新核验 · NVD

PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, `execute_code()` in `praisonaiagents/tools/pyt...

CVE-2026-47392

PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praiso

历史摘要 · 未重新核验 · NVD

Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153.

CVE-2026-16406

Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153.

CVE-2026-16394

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153.

历史摘要 · 未重新核验 · NVD

CrowdSec offers crowdsourced protection against malicious IPs. From 1.5.0 until 1.7.8, pkg/appsec/request.go NewParsedRequestFromRequest allocated a request body buffer from max...

CVE-2026-44982

CrowdSec offers crowdsourced protection against malicious IPs. From 1.5.0 until 1.7.8, pkg/appsec/request.go NewParsedRe

历史摘要 · 未重新核验 · NVD

CrowdSec AppSec silently drops request body for chunked / HTTP-2 requests

CVE-2026-44982

CrowdSec offers crowdsourced protection against malicious IPs. From 1.5.0 until 1.7.8, pkg/appsec/request.go NewParsedRe

历史摘要 · 未重新核验 · OSV.dev

Dell ThinOS 10, versions prior to 2605_10.2100 contain a Protection Mechanism Failure...

CVE-2026-56087

Dell ThinOS 10, versions prior to 2605_10.2100 contain a Protection Mechanism Failure vulnerability. An attacker with ph

历史摘要 · 未重新核验 · GitHub Advisory

Dell ThinOS 10, versions prior to 2605_10.2100 contain a Protection Mechanism Failure vulnerability. An attacker with physical access could potentially exploit this vulnerabilit...

CVE-2026-56087

Dell ThinOS 10, versions prior to 2605_10.2100 contain a Protection Mechanism Failure vulnerability. An attacker with ph

历史摘要 · 未重新核验 · NVD

Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list verdict is computed when a Template instance is constructed and can r...

CVE-2026-49981

Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list verdict is c

历史摘要 · 未重新核验 · NVD

Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but does not forward the current Source to SandboxExtension:...

CVE-2026-48808

Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but

历史摘要 · 未重新核验 · NVD

Twig is a template language for PHP. Prior to 3.27.0, the sandbox __toString() checks do not fully cover Traversable values passed to join and replace filters or operands evalua...

CVE-2026-48807

Twig is a template language for PHP. Prior to 3.27.0, the sandbox __toString() checks do not fully cover Traversable val

历史摘要 · 未重新核验 · NVD

Twig is a template language for PHP. Prior to 3.27.0, ArrayExpression does not guard dynamic mapping keys that are coerced to strings, allowing PHP to invoke __toString() on a S...

CVE-2026-48806

Twig is a template language for PHP. Prior to 3.27.0, ArrayExpression does not guard dynamic mapping keys that are coerc

历史摘要 · 未重新核验 · NVD