#cwe-200

共收录 1690 条相关情报。

漏洞预警2026-10-29 发布INFO

Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to ...

CVE-2026-113693

Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite versions 25.

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-29 发布MEDIUM

The MW WP Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.7 via the 'post_id' parameter. This makes it possib...

CVE-2026-92086

The MW WP Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-29 发布MEDIUM

The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions u...

CVE-2026-91153

The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulne

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-29 发布MEDIUM

A flaw was found in the client registration component of Keycloak, an open-source identity and access management solution. When a vault provider is used to store sensitive infor...

CVE-2026-117688

A flaw was found in the client registration component of Keycloak, an open-source identity and access management solutio

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-29 发布MEDIUM

The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the settings set whose display template is used to render it, allowing unauthent...

CVE-2026-78396

The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the settings set whose

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-29 发布MEDIUM

The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not perform an authorization check before rendering posts through its recipe print feature, allowing unauthenticat...

CVE-2026-115282

The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not perform an authorization check before rendering posts

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-29 发布MEDIUM

The GeoDirectory WordPress plugin before 2.8.197 does not honour post password protection when rendering a listing, allowing unauthenticated users to disclose the content and c...

CVE-2026-114270

The GeoDirectory WordPress plugin before 2.8.197 does not honour post password protection when rendering a listing, all

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-29 发布LOW

The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settings it returns to visitors, allowing unauthenticated users to read the reCAPTCHA secret ...

CVE-2026-108686

The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settings it returns to visitors, all

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-29 发布MEDIUM

A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to an inform...

CVE-2026-40063

A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-28 发布MEDIUM

A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown function of the component Request Forwarder. The manipula...

CVE-2026-118578

A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-200 #cwe-284 #severity:low

安全公告2026-10-28 发布INFO

Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

CVE-2026-116575

Summary _build_session_scope() in mem0/memory/main.py builds the conversation-history scope key used to fetch/store the

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #cwe-863 #npm #pip #severity:medium

漏洞预警2026-10-28 发布INFO

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to version 1.1.36 of the GraphQL Tools legacy WebSocket executor package, buildWSLeg...

CVE-2026-118666

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to version 1.1.36 of the Gr

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-28 发布CRITICAL

FearlessCMS is a flat-file `content` management system centered on simplicity and open source. Prior to version 0.1.4, five debug/test PHP scripts under `admin/` perform privile...

CVE-2026-63190

FearlessCMS is a flat-file `content` management system centered on simplicity and open source. Prior to version 0.1.4, f

来源摘录 · NVD

#cve #cwe-200 #cwe-22 #cwe-288 #cwe-306 #cwe-79

漏洞预警2026-10-28 发布MEDIUM

PostgreSQL Anonymizer doesn't invalidate plans prepared after a rule was added or a role changed. Users using such plans can still see the unmasked data until the end of the ses...

CVE-2026-105617

PostgreSQL Anonymizer doesn't invalidate plans prepared after a rule was added or a role changed. Users using such plans

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-28 发布MEDIUM

PostgreSQL restricts acces to the salt and shift via the `SHOW` command for users not member of `pg_read_all_settings`. But they are visible in `pg_db_role_setting` or `pg_roles...

CVE-2026-105616

PostgreSQL restricts acces to the salt and shift via the `SHOW` command for users not member of `pg_read_all_settings`.

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-28 发布LOW

The GeoDirectory WordPress plugin before 2.8.195 does not perform any status or ownership check when rendering a listing referenced by an id attribute in its field shortcodes, ...

CVE-2026-113494

The GeoDirectory WordPress plugin before 2.8.195 does not perform any status or ownership check when rendering a listin

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-28 发布MEDIUM

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not restrict the post type or meta query an unauthenticated visitor can pass to its pagination endpoint, w...

CVE-2026-110509

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not restrict the post type or meta query an unaut

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-28 发布LOW

The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not restrict the query arguments users can add to its Post Loop widget or limit the loop to posts they are all...

CVE-2026-110507

The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not restrict the query arguments users can add to its

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-28 发布MEDIUM

The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not verify that the requester owns the WooCommerce order named in a payment request, allowing unauthent...

CVE-2026-110292

The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not verify that the requester owns the WooComm

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-28 发布MEDIUM

The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not verify that a requested post is publicly viewable before returning its content via an unauthenticated A...

CVE-2026-107100

The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not verify that a requested post is publicly viewa

来源摘录 · NVD

#cve #cwe-200