#cwe-200

共收录 1690 条相关情报。

漏洞预警2026-11-01 发布MEDIUM

A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the component Desktop Authentication Middleware....

CVE-2026-120192

A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-200 #cwe-284 #severity:medium

漏洞预警2026-10-31 发布MEDIUM

The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin for WordPress is vulnerable to Sensitive Information Exposu...

CVE-2026-109367

The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin fo

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-200 #severity:medium

漏洞预警2026-10-31 发布MEDIUM

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.12 via t...

CVE-2026-103915

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Sensitive Information Ex

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-200 #severity:medium

漏洞预警2026-10-31 发布MEDIUM

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.29.24 via the WP_Object_Cache::_getFileP...

CVE-2026-90960

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-200 #severity:medium

安全公告2026-10-30 发布HIGH

Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs

CVE-2026-118759

## Summary The Kubeflow Pipelines API server's `GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log` handler retrieves

来源摘录 · GitHub Advisory

#advisory #cwe-200 #cwe-862 #go #severity:high

漏洞预警2026-10-30 发布INFO

jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, `middleware/handle-error.ts` serializes raw `FetchError` objects into HTTP...

CVE-2026-62979

jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, `middleware/handl

来源摘录 · NVD

#cve #cwe-200 #cwe-209

漏洞预警2026-10-30 发布MEDIUM

Arc is an open, SQL-native time-series database for telemetry. Prior to the repository-verified 26.06.2 repair, the remediation of `CVE-2026-47735` leaves a cross-database autho...

CVE-2026-55098

Arc is an open, SQL-native time-series database for telemetry. Prior to the repository-verified 26.06.2 repair, the reme

来源摘录 · NVD

#cve #cwe-200 #cwe-863

漏洞预警2026-10-30 发布HIGH

Ladybird is a truly independent web browser. Prior to the c0d68bddf3e3616e5173835f0f4c155ee9700d91 commit, CSSStyleSheet.cssRules, insertRule(), and deleteRule() in Libraries/Li...

CVE-2026-119331

Ladybird is a truly independent web browser. Prior to the c0d68bddf3e3616e5173835f0f4c155ee9700d91 commit, CSSStyleSheet

来源摘录 · NVD

#cve #cwe-200 #cwe-346

漏洞预警2026-10-30 发布HIGH

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when `MCP_TRANSPORT=http` enables the opt-in HTTP server...

CVE-2026-62264

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1,

来源摘录 · NVD

#cve #cwe-200 #cwe-287 #cwe-306

漏洞预警2026-10-30 发布HIGH

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.9.2.7 via the process. This mak...

CVE-2026-110305

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all version

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-30 发布CRITICAL

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected deployments, the unauthenticated `/scoutsuite-report` `Static...

CVE-2026-61730

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected depl

来源摘录 · NVD

#cve #cwe-200 #cwe-306 #cwe-522 #cwe-552

漏洞预警2026-10-30 发布LOW

Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that allows clients to receive protected field values written by beforeSave trigge...

CVE-2026-119570

Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that allows clients to re

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-30 发布INFO

An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a mali...

CVE-2026-14467

An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-30 发布MEDIUM

The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before exporting its configuration, allowing unauthenticated users to...

CVE-2026-118100

The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before expor

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-30 发布MEDIUM

The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its File System Watcher file viewer to Super Admins or to the f...

CVE-2026-114444

The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its Fi

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-29 发布MEDIUM

Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the Nuxt development server can expose the Nitro 2 development bundle at <buildDir>/dev/inde...

CVE-2026-119199

Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the Nuxt development server can exp

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-200 #cwe-538 #cwe-552 #npm

漏洞预警2026-10-29 发布HIGH

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/{run_id}/nodes/{nod...

CVE-2026-118759

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-200 #cwe-862 #go #severity:high

安全公告2026-10-29 发布HIGH

@sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY

CVE-2026-62264

### Impact When `@sylphx/pdf-reader-mcp` is run as an HTTP server (`MCP_TRANSPORT=http`), it reads the `MCP_API_KEY` en

来源摘录 · GitHub Advisory

#advisory #cwe-200 #cwe-287 #cwe-306 #npm #severity:high

漏洞预警2026-10-29 发布MEDIUM

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper sanitization of secrets during flow and project...

CVE-2026-77817

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-29 发布LOW

Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 returns the stored value of a field reverted by a beforeSave trigger in object update responses, even to clients with...

CVE-2026-119125

Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 returns the stored value of a field reverted by a beforeSave

来源摘录 · NVD

#cve #cwe-200