#cwe-200

共收录 1721 条相关情报。

漏洞预警2026-09-02 发布INFO

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium s...

CVE-2026-84348

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak s

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-01 发布INFO

WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration endpoint that returns sensitive configuration data to unau...

CVE-2026-84481

WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration e

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-01 发布INFO

A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some information handled by the affected system. Suc...

CVE-2026-73745

A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-01 发布INFO

A vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administrative privileges to access sensitive information in a cleartext for...

CVE-2026-73739

A vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administrative priv

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-01 发布INFO

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to view sensitive...

CVE-2026-73738

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low pr

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-01 发布INFO

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to obtain sensiti...

CVE-2026-73732

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low pr

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-09-01 发布INFO

Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests

CVE-2026-73229

Summary AdminRenderer may disclose data that would normally be protected by GET permissions when rendering a 400 Bad Re

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-200 #severity:medium

漏洞预警2026-09-01 发布INFO

Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.

CVE-2026-84127

Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 15

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-09-01 发布INFO

An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts...

CVE-2026-53682

An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receiv

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-09-01 发布INFO

Kyverno before 1.16.4 automatically attaches the admission controller's ServiceAccount token to outbound HTTP requests in apiCall service mode without explicit authorization hea...

CVE-2026-84195

Kyverno before 1.16.4 automatically attaches the admission controller's ServiceAccount token to outbound HTTP requests i

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-09-01 发布INFO

Kyverno before 1.16.4 Credential Leak via apiCall

CVE-2026-84195

Kyverno before 1.16.4 automatically attaches the admission controller's ServiceAccount token to outbound HTTP requests i

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200

漏洞预警2026-09-01 发布INFO

The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing unauthenticated attackers to disclose the patient roster...

CVE-2026-13611

The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-862

安全公告2026-08-31 发布INFO

Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController...

CVE-2026-80194

Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route (report_pro

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:high

漏洞预警2026-08-31 发布INFO

Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability exists in its backend API endpoints, specifically /deploy/f...

CVE-2026-53553

Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability ex

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200

漏洞预警2026-08-31 发布INFO

oasdiff-action is a GitHub Action that detects breaking changes in OpenAPI specs and post a review on every pull request. Before version 0.0.51, the oasdiff actions resolved ext...

CVE-2026-53507

oasdiff-action is a GitHub Action that detects breaking changes in OpenAPI specs and post a review on every pull request

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-918 #cwe-1188

安全公告2026-08-31 发布INFO

oasdiff actions resolve external $refs by default, enabling SSRF and disclosure of structured files on pull-request runs

CVE-2026-53507

oasdiff-action is a GitHub Action that detects breaking changes in OpenAPI specs and post a review on every pull request

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1188 #cwe-200 #cwe-918

安全公告2026-08-31 发布INFO

Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise

CVE-2026-53553

Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability ex

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-22

漏洞预警2026-08-31 发布INFO

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener o...

CVE-2026-82810

A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is th

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-08-31 发布INFO

A security flaw has been discovered in vidIQ Vision for YouTube Extension 3.199.0 on Chrome. The affected element is the function window.addEventListener of the component postMe...

CVE-2026-82809

A security flaw has been discovered in vidIQ Vision for YouTube Extension 3.199.0 on Chrome. The affected element is the

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-08-31 发布INFO

A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file inventorymanagement.sql of the component Dat...

CVE-2026-82624

A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284