#cwe-200

共收录 1721 条相关情报。

漏洞预警2026-09-19 发布INFO

The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.54.10 via the JSON-LD REST AP...

CVE-2026-9289

The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive Information Exposure in all versi

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-19 发布INFO

The YS LeadGen plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 due to the 'ysleadgen_get_captured_data' AJAX act...

CVE-2026-1255

The YS LeadGen plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-19 发布INFO

The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its REST API endpoints, allowing unauthenticated users to retrieve the stored WooCommer...

CVE-2026-92404

The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its REST API endpoints, allowi

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-19 发布INFO

The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check when returning page-builder content through an authenticated AJAX action, allowing...

CVE-2026-16557

The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check when returning page-build

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-18 发布INFO

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. In versions 5.1.0 through 5.9.2, stringify and uneva...

CVE-2026-92708

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-226

漏洞预警2026-09-18 发布INFO

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.2, GET /mcp/form/config/{formKey} calls McpControll...

CVE-2026-63646

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior t

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-18 发布INFO

Mojolicious is a real-time web framework for Perl. Prior to 9.48, the Mojolicious CSRF helpers csrf_field, csrf_token, and csrf_protect reuse an unchanged per-session token in r...

CVE-2026-77568

Mojolicious is a real-time web framework for Perl. Prior to 9.48, the Mojolicious CSRF helpers csrf_field, csrf_token, a

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-352

安全公告2026-09-18 发布INFO

Mojolicious: CSRF tokens are vulnerable to BREACH attacks

CVE-2026-77568

Mojolicious is a real-time web framework for Perl. Prior to 9.48, the Mojolicious CSRF helpers csrf_field, csrf_token, a

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-352

漏洞预警2026-09-18 发布INFO

A flaw was found in the multicluster-observability-addon. A remote attacker can access a debug endpoint without authentication, due to a misconfiguration in the underlying addon...

CVE-2026-93685

A flaw was found in the multicluster-observability-addon. A remote attacker can access a debug endpoint without authenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-18 发布INFO

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from t...

CVE-2026-56597

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthe

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-18 发布INFO

HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated attacker to inject data...

CVE-2026-67100

HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. w

历史摘要 · 未重新核验 · NVD

#cve #cwe-89 #cwe-200

漏洞预警2026-09-18 发布INFO

The GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI plugin for WordPress is vulnerable to Sensitive Information Exposure in all versio...

CVE-2026-89278

The GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI plugin for WordPress is v

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-18 发布INFO

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform an authorization check on one of its appointment-retrieval actions, allowing users w...

CVE-2026-89008

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform an authorization check on o

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-18 发布INFO

The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied po...

CVE-2026-84903

The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability, post-status, or password

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-09-17 发布INFO

Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker...

CVE-2026-93383

Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin d

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200

安全公告2026-09-17 发布INFO

Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to...

CVE-2026-93385

Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive informat

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200

漏洞预警2026-09-17 发布INFO

Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity:...

CVE-2026-93385

Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive informat

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-17 发布INFO

Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity:...

CVE-2026-93383

Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin d

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-17 发布INFO

rhwp is an HWP viewer and editor implemented in Rust and WebAssembly. Prior to rhwp 0.7.15 and rhwp Chrome and Firefox extension 0.2.4, the browser extensions use an all-URLs ho...

CVE-2026-54565

rhwp is an HWP viewer and editor implemented in Rust and WebAssembly. Prior to rhwp 0.7.15 and rhwp Chrome and Firefox e

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-359 #cwe-918 #cwe-1385

安全公告2026-09-17 发布INFO

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

CVE-2026-81870

### Summary OpenTelemetry Go versions 1.5.0 through 1.44.0 can include trace exporter endpoint configuration in an inte

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-200 #cwe-532 #severity:low