#cwe-200

共收录 1721 条相关情报。

漏洞预警2026-09-23 发布INFO

The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through...

CVE-2026-84168

The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthen

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-23 发布INFO

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not restrict access to a REST endpoint that returns user records, al...

CVE-2026-84026

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not restric

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-23 发布INFO

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on one of its AJAX actions, allowing users with a subscriber-level account to disclose ...

CVE-2026-18365

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on one of its AJAX actions, al

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-09-22 发布INFO

A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized...

CVE-2026-76712

A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, information di

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:high

安全公告2026-09-22 发布INFO

A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the...

CVE-2026-76717

A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclosure of sensitive inf

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

漏洞预警2026-09-22 发布INFO

wlc is a Weblate command-line client using Weblate's REST API. Prior to 2.0.1, automatically discovered configuration from .weblate, .weblate.ini, or weblate.ini can select the ...

CVE-2026-62364

wlc is a Weblate command-line client using Weblate's REST API. Prior to 2.0.1, automatically discovered configuration fr

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-349

安全公告2026-09-22 发布INFO

Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode

CVE-2026-76805

A vulnerability in Nuclei's DAST/fuzz expression evaluation path allows a malicious target server to trigger disclosure

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-200 #severity:medium

漏洞预警2026-09-22 发布INFO

A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclosure of sensitive information. An unauthenticated remote attacker could exploi...

CVE-2026-76717

A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclosure of sensitive inf

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-22 发布INFO

A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, information disclosure, or denial of service. An unauthenticated remote...

CVE-2026-76712

A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, information di

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-22 发布INFO

A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the disclosure of sensitive information. An unauthenticated remote atta...

CVE-2026-76710

A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the disclosure

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-22 发布INFO

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=false acce...

CVE-2026-77246

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200 #cwe-441

安全公告2026-09-22 发布INFO

MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path

CVE-2026-77246

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-22 #cwe-441

漏洞预警2026-09-22 发布INFO

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy organization members without Git provider access can retrieve plaintext provider credent...

CVE-2026-86059

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy organization members without Gi

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-862

漏洞预警2026-09-22 发布INFO

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz payload path in pkg/fuzz/parts.go can evaluate substituted runtime dat...

CVE-2026-76805

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz payload path

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-09-22 发布INFO

Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode

CVE-2026-76805

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz payload path

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200

漏洞预警2026-09-22 发布INFO

Dark Reader is an accessibility browser extension that makes web pages colors dark. Prior to 4.9.126, a website can cause the browser extension's image inversion pipeline to req...

CVE-2026-92706

Dark Reader is an accessibility browser extension that makes web pages colors dark. Prior to 4.9.126, a website can caus

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-346 #cwe-668

漏洞预警2026-09-22 发布INFO

Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.22.0, field-level read permission is enforced on selected output fields but not on GraphQL o...

CVE-2026-85055

Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.22.0, field-level read permission i

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-285

安全公告2026-09-22 发布INFO

Dokploy: Git Provider Credential Exposure via Unprotected .one Endpoints and application.one

CVE-2026-86059

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy organization members without Gi

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-862

安全公告2026-09-22 发布INFO

Dark Reader: Ability to request icon-like bitmap data from certain local web servers

CVE-2026-92706

Dark Reader is an accessibility browser extension that makes web pages colors dark. Prior to 4.9.126, a website can caus

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-346 #cwe-668

安全公告2026-09-22 发布INFO

Twenty: Field-level read bypass

CVE-2026-85055

Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.22.0, field-level read permission i

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-285