#cwe-200

共收录 1721 条相关情报。

← 返回所有主题

安全公告2026-09-17 发布INFO

Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and are never covered by config_denied_paths

CVE-2026-72698

## Summary `Grav\Common\Twig\Twig::init()` unconditionally puts the raw `system`, `site`, and `theme` config arrays int

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-200 #severity:high

漏洞预警2026-09-17 发布INFO

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. From 1.3.0 until 1.6.6 and 1.7.3, importing a standalone Talos cluster creates an ImportedClusterSecrets ...

CVE-2026-45726

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. From 1.3.0 until 1.6.6 and 1.7.3, importing a st

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-522 #cwe-732

漏洞预警2026-09-17 发布INFO

punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to a private inbox. Prior to 1.5.0, handleInbound delivers inbound alias mail w...

CVE-2026-54649

punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to a private inbox. Pr

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-201

漏洞预警2026-09-17 发布INFO

GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenticated remote actor can send a raw HTTP request target without a leadin...

CVE-2026-54617

GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenticated remote

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200 #cwe-522

安全公告2026-09-17 发布INFO

GravitLauncher: Unauthenticated path traversal in LaunchServer FileServerHandler

CVE-2026-54617

GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenticated remote

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-22 #cwe-522

安全公告2026-09-17 发布INFO

punchin-email: Operator inbox (FORWARD_TO) disclosed to correspondents on reply — Cloudflare forward() drops the relay Reply-To

CVE-2026-54649

punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to a private inbox. Pr

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-201

漏洞预警2026-09-17 发布INFO

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /db/drug_recommendor.sql. Performing a manipul...

CVE-2026-92927

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing o

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-09-17 发布INFO

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.14.5 to 2.16.0 and from 3.0.9 to 3.0...

CVE-2026-85717

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-522

漏洞预警2026-09-17 发布INFO

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. Prior to 4.3.0, the Steeltoe.Management.Endpoint /ac...

CVE-2026-75523

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applicati

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-17 发布INFO

Umbraco is an ASP.NET CMS. Prior to 13.15.1, 17.5.3, and 18.0.2, the Content Delivery API applies member and Public Access checks to the directly requested node but not to refer...

CVE-2026-69197

Umbraco is an ASP.NET CMS. Prior to 13.15.1, 17.5.3, and 18.0.2, the Content Delivery API applies member and Public Acce

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-862

漏洞预警2026-09-17 发布INFO

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privileged attacker...

CVE-2026-80356

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Un

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-17 发布INFO

Vendure is an open-source headless commerce platform. Prior to 3.6.5, the public Shop API products, collections, and facets queries combine mandatory visibility guards with call...

CVE-2026-63461

Vendure is an open-source headless commerce platform. Prior to 3.6.5, the public Shop API products, collections, and fac

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-17 发布INFO

vm2 before 3.11.6 fails to restrict access to os and dns builtins under the builtin: ['*'] configuration, allowing sandbox code to read host process identity and network topolog...

CVE-2026-92960

vm2 before 3.11.6 fails to restrict access to os and dns builtins under the builtin: ['*'] configuration, allowing sandb

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-17 发布INFO

vm2 before 3.11.7 exposes Node's shared Buffer pool to sandboxed code, allowing disclosure of host memory used by Buffer.from, Buffer.concat, and related allocations. Sandboxed ...

CVE-2026-92947

vm2 before 3.11.7 exposes Node's shared Buffer pool to sandboxed code, allowing disclosure of host memory used by Buffer

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-17 发布INFO

vm2 is a sandbox for running untrusted Node.js code. In versions <= 3.11.7, NodeVM exposes the host `util` module to the sandbox as an unfiltered shallow copy (`Object.assign({}...

CVE-2026-92933

vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code `util.getCallSites()`,

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-17 发布INFO

Grav is a flat-file CMS. In versions 2.0.0-rc.1 through 2.0.21, the Twig content sandbox fails to restrict the dump and serialize filters (print_r, vardump, json_encode, yaml_en...

CVE-2026-92917

Grav is a flat-file CMS. In versions 2.0.0-rc.1 through 2.0.21, the Twig content sandbox fails to restrict the dump and

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-17 发布INFO

Grav is a flat-file CMS. In Grav 1.7.0 through 1.7.53.2 and 2.0.0 through 2.0.21, when the debugger is enabled (system.debugger.enabled: true, which is not the default), the Clo...

CVE-2026-92916

Grav is a flat-file CMS. In Grav 1.7.0 through 1.7.53.2 and 2.0.0 through 2.0.21, when the debugger is enabled (system.d

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-17 发布INFO

The rancher-extension-stackstate extension in SUSE Observability exposes service tokens in plain configuration or insecure locations rather than managing them securely. An attac...

CVE-2026-44940

The rancher-extension-stackstate extension in SUSE Observability exposes service tokens in plain configuration or insecu

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-312

漏洞预警2026-09-17 发布INFO

The Comments Import & Export WordPress plugin before 2.5.4 does not restrict its comment export to users able to moderate comments, nor scope the export to content owned by the ...

CVE-2026-87836

The Comments Import & Export WordPress plugin before 2.5.4 does not restrict its comment export to users able to moderat

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-17 发布INFO

The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is checked, allowing unauthenticated attackers to obtain the ...

CVE-2026-86446

The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is c

历史摘要 · 未重新核验 · NVD

#cve #cwe-200