#cwe-200

共收录 1717 条相关情报。

漏洞预警2026-09-30 发布INFO

A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms can be displayed to anonymous visitors, but it returned mo...

CVE-2026-102121

A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms c

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-306

安全公告2026-09-30 发布INFO

A security vulnerability has been detected in gedelumbung HospitalManagement up to...

CVE-2026-102845

A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf7

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

漏洞预警2026-09-30 发布INFO

A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affects the function error_reporting of t...

CVE-2026-102845

A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf7

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

安全公告2026-09-30 发布INFO

A missing authorization vulnerability in the wgagent management daemon's session initialization...

CVE-2026-90441

A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authe

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:high

漏洞预警2026-09-30 发布INFO

A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or g...

CVE-2026-90441

A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authe

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-400 #cwe-862

安全公告2026-09-29 发布INFO

PyJWT: PyJWKClient follows redirects when fetching JWKS

CVE-2026-102267

### Summary PyJWT 2.13.0 `PyJWKClient` followed HTTP redirects while fetching a JWKS, without validating the redirect d

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-200 #cwe-345 #cwe-918 #severity:high

漏洞预警2026-09-29 发布INFO

Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to o...

CVE-2026-95367

Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised t

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-29 发布INFO

Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a c...

CVE-2026-95336

Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging s

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-29 发布INFO

Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severi...

CVE-2026-95327

Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive infor

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-29 发布INFO

Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafte...

CVE-2026-95312

Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-29 发布INFO

Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacker to leak sensitive information via physical access. (Chromium security sever...

CVE-2026-95295

Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacker to leak sensitive

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-29 发布INFO

Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker executing in the non-secure world to supply ...

CVE-2026-102709

Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-501 #cwe-822

安全公告2026-09-29 发布INFO

CVE-2026-102709

Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-501 #cwe-822

漏洞预警2026-09-29 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows Excavation. This issue affects Mediawi...

CVE-2026-100244

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-29 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excavation. This issue affects Mediawiki ...

CVE-2026-100241

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Ex

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-29 发布INFO

Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated non-administrative user to disclose integration secret...

CVE-2026-100286

Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authenticat

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-29 发布INFO

The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive information such as serial numbers, MAC addresses, and WiFi net...

CVE-2026-22101

The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive inform

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-29 发布INFO

Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.

CVE-2026-96869

Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-29 发布INFO

Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

CVE-2026-100766

Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157,

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-09-29 发布INFO

A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an...

CVE-2026-101265

A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an unknown function of the c

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:low