#cwe-200

共收录 1721 条相关情报。

漏洞预警2026-09-22 发布INFO

In MISP, the OrganisationsController::__uploadLogo method processed a caller-supplied tmp_name value with filesystem probes (file_exists, MIME type detection, EXIF reading) befo...

CVE-2026-95703

In MISP, the OrganisationsController::__uploadLogo method processed a caller-supplied tmp_name value with filesystem pro

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-200

漏洞预警2026-09-22 发布INFO

In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmp_name field by invoking file_exists(), mime_content_type(), and exif_imagetype() on the supplied...

CVE-2026-95693

In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmp_name field by invoking file_exists(),

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200

安全公告2026-09-22 发布INFO

MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name

CVE-2026-95703

In MISP, the OrganisationsController::__uploadLogo method processed a caller-supplied tmp_name value with filesystem pro

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-20 #cwe-200

安全公告2026-09-22 发布INFO

MISP Information Disclosure via Forged Upload Path

CVE-2026-95693

In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmp_name field by invoking file_exists(),

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-22

漏洞预警2026-09-22 发布INFO

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a docum...

CVE-2026-63278

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information c

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-22 发布INFO

The WP-CRM System – Manage Clients and Projects plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.6 via the 'contact...

CVE-2026-9004

The WP-CRM System – Manage Clients and Projects plugin for WordPress is vulnerable to Sensitive Information Exposure in

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-21 发布INFO

jshERP through 3.6 fails to redact password hashes in the /user/info endpoint, allowing authenticated users to retrieve unsalted MD5 password digests for any user. Attackers can...

CVE-2026-94413

jshERP through 3.6 fails to redact password hashes in the /user/info endpoint, allowing authenticated users to retrieve

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-21 发布MEDIUM

Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any au...

CVE-2026-75158

Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-09-21 发布MEDIUM

nvm resolves a requested version or alias by treating it as a filename under $NVM_DIR/alias. Before 0.40.8, nvm_alias() concatenated the requested name onto that directory and r...

CVE-2026-94185

nvm 通过把请求的版本号或别名当作 $NVM_DIR/alias 目录下的文件名来解析。在 0.40.8 之前，nvm_alias() 只是把请求的名称直接拼接到该目录路径后读取文件，完全没有做“结果必须仍位于 alias 目录内”的包含

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200

安全公告2026-09-20 发布INFO

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the...

CVE-2026-94050

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

漏洞预警2026-09-20 发布INFO

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_get/routerd.get_rand_key of the component ubus JSON-RPC i...

CVE-2026-94050

A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

安全公告2026-09-20 发布INFO

A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of...

CVE-2026-93971

A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevo

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

安全公告2026-09-20 发布INFO

The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or...

CVE-2026-92423

The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the req

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:low

漏洞预警2026-09-20 发布INFO

A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevops/settings.py. This manipulation causes information disc...

CVE-2026-93971

A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevo

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

安全公告2026-09-20 发布INFO

aiyiyi121 SxDevOps settings.py information disclosure

CVE-2026-93971

A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevo

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-284

漏洞预警2026-09-20 发布INFO

The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the requesting user's own posts before returning post data, allo...

CVE-2026-92423

The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the req

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-09-19 发布INFO

The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive...

CVE-2026-9289

The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive Information Exposure in all versi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

安全公告2026-09-19 发布INFO

The YS LeadGen plugin for WordPress is vulnerable to Sensitive Information Exposure in all...

CVE-2026-1255

The YS LeadGen plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:high

安全公告2026-09-19 发布INFO

The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its...

CVE-2026-92404

The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its REST API endpoints, allowi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:high

安全公告2026-09-19 发布INFO

The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check...

CVE-2026-16557

The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check when returning page-build

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium