#cwe-200

共收录 1721 条相关情报。

← 返回所有主题
漏洞预警2026-09-11 发布INFO

NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. In versions up...

CVE-2026-49462

NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, custom

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clien...

CVE-2026-89298

A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is missing an authentication/authorization check in plugin/WebRTC/status.json.php. When the WebRTC plugin is prese...

CVE-2026-89248

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is missing an authentication/authorization check in plugi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of ...

CVE-2026-14562

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks bef

历史摘要 · 未重新核验 · NVD

安全公告2026-09-10 发布INFO

rclone: http backend forwards custom/auth headers to a different host on redirect

CVE-2026-88013

## Vulnerability Details **File**: `backend/http/http.go` **Lines**: 285 (client construction — no `CheckRedirect`), 50

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-10 发布INFO

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.1, Angula...

CVE-2026-88059

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

历史摘要 · 未重新核验 · NVD

安全公告2026-09-10 发布INFO

Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`

CVE-2026-88059

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-10 发布INFO

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.0 until 1.75.1, the HTTP backend attaches headers configu...

CVE-2026-88013

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.

历史摘要 · 未重新核验 · NVD

安全公告2026-09-10 发布INFO

rclone: http backend forwards custom/auth headers to a different host on redirect

CVE-2026-88013

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-10 发布INFO

OpenPanel share lookup procedures fail to validate access controls and return password hashes and protected report definitions to unauthenticated callers. Attackers with a share...

CVE-2026-88893

OpenPanel share lookup procedures fail to validate access controls and return password hashes and protected report defin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in plugin/PlayerSkins/seo.php that allows unauthenticated attacke...

CVE-2026-88876

AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in plugi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) does not enforce the Live stream password check on the stats endpoint or on the HLS origin....

CVE-2026-88874

AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) does not enforce the Live stream p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displaying gift card details, allowing unauthenticated users to...

CVE-2026-19439

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not have any authorisation check when displa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. T...

CVE-2026-0305

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-09 发布INFO

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.1, the built-in knowledge search tool passed the caller's readable kn...

CVE-2026-87017

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.1, the built

历史摘要 · 未重新核验 · NVD

安全公告2026-09-09 发布INFO

Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends

CVE-2026-87017

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.1, the built

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-09 发布INFO

Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 (magefan/module-blog-graph-ql) through 2.2.1 allows remote unauthenticated attacke...

CVE-2026-79323

Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 (magefan/module-blog-grap

历史摘要 · 未重新核验 · NVD

安全公告2026-09-09 发布INFO

Tanium addressed an information disclosure vulnerability in Comply.

CVE-2026-87035

Tanium addressed an information disclosure vulnerability in Comply.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-09 发布INFO

Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...

CVE-2026-87658

Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-09 发布INFO

Tanium addressed an information disclosure vulnerability in Tanium Server.

CVE-2026-87032

Tanium addressed an information disclosure vulnerability in Tanium Server.

历史摘要 · 未重新核验 · GitHub Advisory