32439 matches found
EUVD-2025-210120
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data...
CVE-2025-24268
A path traversal vulnerability exists in macOS Sequoia versions prior to 15.4 due to a parsing issue in the handling of directory paths. This flaw could allow an application to bypass restrictions and access sensitive user data . The issue is resolved in macOS Sequoia 15.4 through the implementat...
CVE-2025-43339
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to access sensitive user data...
EUVD-2025-210119
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to access sensitive user data...
CVE-2025-43339
A vulnerability exists in macOS Tahoe versions prior to 26.1 due to an access control error. This flaw could allow a malicious application to bypass existing protections and access sensitive user data . The issue is addressed by implementing additional sandbox restrictions to isolate running appl...
CVE-2025-30459
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data...
EUVD-2025-210112
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...
EUVD-2025-210110
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to leak sensitive user information...
CVE-2025-46308
An authorization issue involving state management allows an application to potentially leak sensitive user information . This vulnerability affects iOS versions prior to 18.4, iPadOS versions prior to 18.4, and macOS Sequoia versions prior to 15.4. The issue is resolved in iOS 18.4 , iPadOS 18.4 ...
Insertion of Sensitive Information into Log File
Overview @element-hq/element-call-embedded is a NPM package containing an embedded build of the Element Call widget. Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the analytics reporting process. An attacker can obtain sensitive informatio...
USN-8422-1: Mistral vulnerability
Eduardo Gonzalez Gutierrez and Arnaud Morin discovered that Mistral did not properly enforce access policies on some API endpoints. An attacker could possibly execute arbitrary code on a Mistral worker and possibly extract sensitive data including service credentials from it...
WordPress Fortis For WooCommerce plugin < 1.3.1 - Sensitive API Key Disclosure vulnerability
Sensitive API Key Disclosure vulnerability discovered by WPScan Team in WordPress Plugin Fortis for WooCommerce versions 1.3.1...
Apple macOS Sequoia 信息泄露漏洞
Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Sequoia 15.4 had a security vulnerability that stemmed from privacy concerns, potentially allowing applications to access sensitive user data...
Microsoft Excel information leakage vulnerability (CNVD-2026-24917)
Microsoft Excel is a spreadsheet software within the Office suite developed by the American company Microsoft. There is an information leakage vulnerability in Microsoft Excel, and attackers can exploit this vulnerability to obtain sensitive information...
Apple macOS 路径遍历漏洞
Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Sequoia 15.4 and earlier contained a path traversal vulnerability. This vulnerability stemmed from parsing issues with directory path handling, which could allow...
Microsoft Excel information leakage vulnerability (CNVD-2026-24914)
Microsoft Excel is a spreadsheet software within the Office suite developed by the American company Microsoft. There is an information leakage vulnerability in Microsoft Excel, and attackers can exploit this vulnerability to obtain sensitive information...
PT-2026-48674
IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references...
PT-2026-48743
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.25 Description A path traversal issue exists in the memory-core artifact loading process, where the workspace state affects how the local package root is resolved. This allows attackers with access to affected...
Apple多款产品 访问控制错误漏洞
Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have...
