Lucene search
+L

2742 matches found

Cvelist
Cvelist
•added 2026/02/11 10:58 p.m.•37 views

CVE-2026-20666

An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.3. An app may be able to access sensitive user data...

0.00128EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/11 10:58 p.m.•54 views

CVE-2026-20666

CVE-2026-20666 maps to an Apple macOS authorization issue that was mitigated by state-management changes. Affected product: macOS Tahoe 26.3 (and related advisories note fixes in Tahoe 26.3, Sequoia 15.7.4, Sonoma 14.8.4). Vulnerable component/behavior: an authorization flaw that could allow an a...

5.5CVSS5.8AI score0.00128EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•13 views

PT-2026-27538

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.7.4 macOS versions prior to Sonoma 14.8.4 macOS versions prior to Tahoe 26.3 Description An authorization issue exists in the AppleEvents component due to state management errors. This flaw could allow an...

5.5CVSS5.5AI score0.00126EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2026/02/11 12:00 a.m.•16 views

AVideo 授权问题漏洞

AVideo is an open-source broadcast network creation tool developed by the World Wide Broadcast Network. Version 8.1 of AVideo contains an authorization vulnerability, which stems from cross-site request forgery attacks. This vulnerability could allow attackers to exploit the password recovery...

8.8CVSS5.7AI score0.00268EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•4 views

CVE-2026-20678: Exposure of Sensitive Information to an Unauthorized Actor

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An app may be able to access sensitive user data...

5.5CVSS5.7AI score0.00143EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•27 views

PT-2026-7730

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.7.4 macOS versions prior to Sonoma 14.8.4 Description An authorization issue exists due to improved state management. This could allow an application to access sensitive user data. Recommendations Update to...

5.5CVSS5.4AI score0.002EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2026/02/11 12:00 a.m.•24 views

Klaw 授权问题漏洞

Klaw is an open-source operating system tool developed by Aiven Open. Versions of Klaw prior to 2.10.2 had an authorization issue vulnerability. This vulnerability stemmed from improper access control, which could allow unauthorized users to trigger the reset or deletion of metadata for any tenan...

7.1CVSS5.8AI score0.00434EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/11 12:00 a.m.•25 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. Both Apple iOS and Apple iPadOS have security vulnerabilities that stem from authorization issues, which may...

5.5CVSS5.8AI score0.00132EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•13 views

PT-2026-7790

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.7.4 macOS versions prior to Tahoe 26.3 Description An authorization issue exists due to improved state management. An attacker with physical access to a locked device may be able to view sensitive user...

4.6CVSS5.3AI score0.0018EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•19 views

PT-2026-7792

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.3 Description An authorization issue existed due to improved state management. This allowed an application to potentially access sensitive user data. Recommendations Update to macOS version 26.3...

5.4AI score0.00128EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•3 views

CVE-2026-20662: Exposure of Sensitive Information to an Unauthorized Actor

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An attacker with physical access to a locked device may be able to view sensitive user information...

4.6CVSS5.5AI score0.0018EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•27 views

PT-2026-7801

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.3 iPadOS versions prior to 26.3 iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 Description An authorization issue exists due to improved state management. This can allow an application to access sensitive...

5.4AI score0.00143EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•35 views

PT-2026-7789

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.3 iPadOS versions prior to 26.3 iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 Description An authorization issue existed due to improved state management. An attacker with physical access to a locked...

5.3AI score0.00177EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•41 views

PT-2026-39757

Name of the Vulnerable Software and Affected Versions macOS Tahoe versions prior to 26.4 Description An authorization issue exists due to improper state management, which could allow an application to access sensitive user data. Recommendations Update to macOS Tahoe 26.4...

5.5CVSS5.2AI score0.00116EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•20 views

PT-2026-7785

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.3 iPadOS versions prior to 26.3 iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 Description An authorization issue exists due to improved state management. An attacker with physical access to a locked devi...

5.3AI score0.00132EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/02/09 12:00 a.m.•17 views

Birtech Senseway 授权问题漏洞

Birtech Senseway is an environmental data monitoring platform developed by the Turkish company Birtech. Versions of Birtech Senseway from 09022026 onward have a vulnerability related to authorization issues. This vulnerability stems from improper authentication procedures, which may lead to...

7.3CVSS5.8AI score0.00332EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/07 12:00 a.m.•23 views

PT-2026-6929

Name of the Vulnerable Software and Affected Versions WeKan versions prior to 8.19 Description An authorization issue exists in the card move logic of the software. A user can define a destination board, list, or swimlane without sufficient authorization verification for the destination. The syst...

7.1CVSS5.7AI score0.00346EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/02/07 12:00 a.m.•25 views

PT-2026-6928

Name of the Vulnerable Software and Affected Versions WeKan versions prior to 8.19 Description WeKan contains an authorization issue in certain card update API paths. These paths only validate read access to a board instead of requiring write permission. This allows users with read-only roles to...

7.1CVSS5.4AI score0.00442EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/02/06 12:00 a.m.•25 views

Claude Code 授权问题漏洞

Claude Code is an open-source terminal-native AI programming tool developed by Anthropic. Versions of Claude Code prior to 2.1.7 had an authorization issue vulnerability. This vulnerability occurred due to the failure to strictly enforce the denial rules configured in settings.json when accessing...

7.5CVSS5.8AI score0.00666EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/02/06 12:00 a.m.•22 views

PublicCMS 授权问题漏洞

PublicCMS is an open-source content management system CMS developed by PublicCMS Company in China using the Java language. There is an authorization issue in PublicCMS; this issue stems from a mistake in the parameter paymentId of the function Paid within the component Trade Payment Handler,...

4.2CVSS5.7AI score0.00366EPSS
SaveExploits1References7
Rows per page
Query Builder