Cyber Security Daily Radar

#cwe-200

共收录 1690 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布INFO

Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109767

Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thun

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
漏洞预警2026-10-13 发布INFO

Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109751

Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thun

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
漏洞预警2026-10-13 发布INFO

Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109742

Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thun

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
漏洞预警2026-10-13 发布INFO

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and ...

CVE-2026-109709

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
漏洞预警2026-10-13 发布INFO

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the ai_wp_footer...

CVE-2026-89097

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all v

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
安全公告2026-10-13 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain...

CVE-2026-82103

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-200#severity:critical
安全公告2026-10-13 发布INFO

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain...

CVE-2026-75076

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to t

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-200#severity:medium
安全公告2026-10-13 发布INFO

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to...

CVE-2026-17484

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-200#severity:medium
安全公告2026-10-13 发布INFO

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the...

CVE-2026-17487

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct erro

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-200#severity:medium
安全公告2026-10-13 发布INFO

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker...

CVE-2026-93892

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive inf

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-200#severity:high
漏洞预警2026-10-13 发布INFO

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process.

CVE-2026-17487

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct erro

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
漏洞预警2026-10-13 发布INFO

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.

CVE-2026-17484

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
漏洞预警2026-10-12 发布INFO

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML re...

CVE-2026-93892

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive inf

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
漏洞预警2026-10-12 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to an unautho...

CVE-2026-82103

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
漏洞预警2026-10-12 发布INFO

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files.

CVE-2026-75076

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to t

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
漏洞预警2026-10-12 发布INFO

A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation...

CVE-2026-108937

A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown c

历史摘要 · 未重新核验 · NVD

#cve#cwe-200#cwe-538
漏洞预警2026-10-12 发布INFO

A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function ddns_wan_list_show of the file ddns_wan_list_show.cgi of the component DDNS Hand...

CVE-2026-108930

A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function ddns_wan_list_show of t

历史摘要 · 未重新核验 · NVD

#cve#cwe-200#cwe-284
漏洞预警2026-10-12 发布INFO

OpenList is a file list program that supports multiple storage backends. Prior to 4.2.4, the OpenList search API uses a non-separator-aware strings.HasPrefix comparison as a pat...

CVE-2026-102663

OpenList is a file list program that supports multiple storage backends. Prior to 4.2.4, the OpenList search API uses a

历史摘要 · 未重新核验 · NVD

#cve#cwe-200#cwe-639
漏洞预警2026-10-12 发布INFO

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined readPaths and writePaths settings allow all paths, strictRead...

CVE-2026-77364

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined read

历史摘要 · 未重新核验 · NVD

#cve#cwe-200#cwe-276
安全公告2026-10-12 发布INFO

obsidian-tc fail-open default ACL exposes Obsidian control-directory secrets

CVE-2026-77364

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined read

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-200#cwe-276