Lucene search
K

27 matches found

EUVD
EUVD
added 2026/04/09 4:50 p.m.2 views

EUVD-2026-20970

Laravel Passport provides OAuth2 server support to Laravel. From 13.0.0 to before 13.7.1, there is an Authentication Bypass for clientcredentials tokens. the league/oauth2-server library sets the JWT sub claim to the client identifier since there's no user. The token guard then passes this value ...

7.1CVSS5.8AI score0.00289EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/04/09 4:50 p.m.1 views

CVE-2026-39976

Laravel Passport provides OAuth2 server support to Laravel. From 13.0.0 to before 13.7.1, there is an Authentication Bypass for clientcredentials tokens. the league/oauth2-server library sets the JWT sub claim to the client identifier since there's no user. The token guard then passes this value ...

7.1CVSS5.8AI score0.00289EPSS
Exploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.5 views

PT-2026-31663

Laravel Passport provides OAuth2 server support to Laravel. From 13.0.0 to before 13.7.1, there is an Authentication Bypass for client credentials tokens. the league/oauth2-server library sets the JWT sub claim to the client identifier since there's no user. The token guard then passes this value...

7.1CVSS5.8AI score0.00289EPSS
Exploits1References6
OSV
OSV
added 2026/04/08 7:57 p.m.1 views

GHSA-349C-2H2F-MXF6 Laravel Passport: TokenGuard Authenticates Unrelated User for Client Credentials Tokens

Impact Authentication Bypass for clientcredentials tokens. the league/oauth2-server library sets the JWT sub claim to the client identifier since there's no user. The token guard then passes this value to retrieveById without validating it's actually a user identifier, potentially resolving an...

7.1CVSS5.8AI score0.00289EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/05/23 6:17 a.m.3 views

CVE-2024-44275

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may be able to modify protected parts of the file system...

5.5CVSS5.8AI score0.00228EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:17 a.m.3 views

CVE-2024-44257

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to access sensitive user data...

6.2CVSS5.8AI score0.00235EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/11/21 12:0 a.m.15 views

macOS 13.x < 13.7.1 Multiple Vulnerabilities (121568)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.7.1. It is, therefore, affected by multiple vulnerabilities: - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An...

9.3CVSS5.6AI score0.10941EPSS
Exploits1References50
OpenVAS
OpenVAS
added 2024/10/30 12:0 a.m.16 views

Apple MacOSX Security Update (HT121568)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS5.7AI score0.10941EPSS
Exploits1References1
OSV
OSV
added 2024/10/28 9:15 p.m.2 views

CVE-2024-44289

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to read sensitive location information...

7.5CVSS5.8AI score0.00644EPSS
Exploits0References5
OSV
OSV
added 2024/10/28 9:15 p.m.3 views

CVE-2024-44196

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system...

5.5CVSS5.7AI score0.00525EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.3 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7.1, which stems from the fact that an application may be able to break through sandbox restrictions...

9.3CVSS6.3AI score0.00245EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.1 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7.1, which originates from an application that may be able to modify protected portions of the file system...

7.7CVSS6.2AI score0.00235EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.4 views

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7.1, which stems from an application that may be able to access sensitive user data...

6.2CVSS6.1AI score0.00235EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.2 views

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS version 13.7.1, which originates from an attacker with root privileges who may be able to delete protected system files...

6.5CVSS6.2AI score0.00859EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.2 views

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7.1, which stems from parsing files that could lead to the disclosure of user information...

5.5CVSS6AI score0.00258EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.1 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7.1, which originates from an application that may be able to modify protected portions of the file system...

7.7CVSS6.2AI score0.00237EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.4 views

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7.1, which stems from parsing files that could lead to the disclosure of user information...

6.5CVSS6AI score0.00498EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.2 views

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS version 13.7.1, which stems from a sandboxed process that may be able to circumvent sandboxing restrictions...

8.6CVSS6.2AI score0.00667EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.3 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7.1, which stems from an application that may be able to bypass privacy preferences...

7.1CVSS6.2AI score0.00237EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.3 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7.1, which originates from an application that may be able to modify protected portions of the file system...

5.5CVSS6.2AI score0.00225EPSS
Exploits0References3
Rows per page
Query Builder