Apple macOS Tahoe 安全漏洞

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

PT-2025-37796

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: A privacy issue was addressed with improved private data redaction for log entries. An application may be able to access user-sensitive data. Recommendations: Update to macOS Tahoe 26 or later...

Linux Distros Unpatched Vulnerability : CVE-2021-22060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious input to cause the...

GHSA-3WWM-HJV7-23R3 Pyload log Injection via API /json/add_package in add_name parameter

Summary A log injection vulnerability was identified in pyload in API /json/addpackage. This vulnerability allows user with add packages permission to inject arbitrary messages into the logs gathered by pyload. Details pyload will generate a log entry when creating new package using API...

CVE-2018-14774

creationtimestamp| type| source ---|---|--- 2025-07-15 06:57:48+00:00| seen| https://t.me/DstatLogs/5130 2025-07-15 06:58:08+00:00| seen| https://t.me/DstatLogs/5131 2025-07-15 07:30:16+00:00| seen| https://t.me/DstatLogs/5170 2025-07-15 07:30:37+00:00| seen| https://t.me/DstatLogs/5171 2025-07-1...

tornado: Tornado Multipart Form-Data Denial of Service

A flaw was found in Tornado. This vulnerability can lead to a a denial of service by generating an extremely high volume of log entries...

tornado: Tornado Multipart Form-Data Denial of Service

A flaw was found in Tornado. This vulnerability can lead to a a denial of service by generating an extremely high volume of log entries...

tornado: Tornado Multipart Form-Data Denial of Service

A flaw was found in Tornado. This vulnerability can lead to a a denial of service by generating an extremely high volume of log entries...

tornado: Tornado Multipart Form-Data Denial of Service

A flaw was found in Tornado. This vulnerability can lead to a a denial of service by generating an extremely high volume of log entries...

tornado: Tornado Multipart Form-Data Denial of Service

A flaw was found in Tornado. This vulnerability can lead to a a denial of service by generating an extremely high volume of log entries...

CVE-2025-24145

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. An app may be able to view a contact's phone number in system logs...

CVE-2024-27863

An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. A local attacker may be able to determine kernel memory layout...

CVE-2024-27809

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data...

CVE-2024-40796

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Private browsing may leak some browsing history...

CVE-2024-44278

An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2.1, watchOS 11.1. A sandboxed app may be able...

CVE-2024-44239

An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. An app may be ab...

CVE-2024-35150

IBM Maximo Application Suite 8.10.12, 8.11.0, 9.0.1, and 9.1.0 - Monitor Component does not neutralize output that is written to logs, which could allow an attacker to inject false log entries...

CVE-2024-27849

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15. An app may be able to read sensitive location information...

CVE-2023-41065

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to read sensitive location information...

CVE-2023-32392

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to read sensitive location information...