Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...
CVE-2026-87593
Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive inform
#cwe-200
共收录 1721 条相关情报。
← 返回所有主题Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
CVE-2026-69806
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges l
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.
CVE-2026-68852
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.
An information disclosure vulnerability has been identified in Omada Controller. An API endpoint intended for Controller initialization remains accessible after completion and ...
CVE-2026-81531
An information disclosure vulnerability has been identified in Omada Controller. An API endpoint intended for Controlle
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local ...
CVE-2026-0860
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd A
It has been discovered that several AJAX routes used for the backend localization wizard failed to perform authorization checks. This allowed authenticated, low-privileged backe...
CVE-2026-77132
It has been discovered that several AJAX routes used for the backend localization wizard failed to perform authorization
A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /card_activation.sql of the component Backup File Handler. Th...
CVE-2026-86519
A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /car
A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of th...
CVE-2026-86308
A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f6138
Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation information. Several organisation-related widgets did no...
CVE-2026-86441
Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation i
Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval and TAXII discovery functionality. In feed processing, re...
CVE-2026-86419
Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval an
Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the same visibility restrictions enforced by the normal organis...
CVE-2026-86418
Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the sa
Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates(). The query always fetched User.email, while redaction happe...
CVE-2026-86417
Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates(). T
A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component ...
CVE-2026-86302
A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown
MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data
CVE-2026-86441
Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation i
MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery
CVE-2026-86419
Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval an
MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users
CVE-2026-86418
Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the sa
MISP Dashboard Template REST API Exposes Template Owner Email Addresses to Unauthorized Users
CVE-2026-86417
Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates(). T
A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the func...
CVE-2026-86284
A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d
WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that...
CVE-2026-86190
WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user record
WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user records including password hashes, recovery tokens, and live se...
CVE-2026-86190
WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user record