#cwe-200

共收录 1690 条相关情报。

漏洞预警2026-10-26 发布INFO

A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the component JSON-RPC Error Handler. This manipulation causes informatio...

CVE-2026-116479

A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the component JS

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-209

漏洞预警2026-10-26 发布INFO

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handle...

CVE-2026-116478

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2as

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-209

漏洞预警2026-10-26 发布MEDIUM

A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element is the function A2AJsonRpcProcessor.ProcessRequestAsync of the fil...

CVE-2026-116477

A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element is the fu

来源摘录 · NVD

#cve #cwe-200 #cwe-209

漏洞预警2026-10-26 发布HIGH

libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/gsm/gsm0480.c. This allows a remote attacker to obtain se...

CVE-2026-104596

libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-26 发布MEDIUM

A weakness has been identified in OctoPrint 1.0.0. This impacts the function getSettings of the file src/octoprint/server/ajax/settings.py of the component API Key Handler. This...

CVE-2013-10077

A weakness has been identified in OctoPrint 1.0.0. This impacts the function getSettings of the file src/octoprint/serve

来源摘录 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-10-26 发布MEDIUM

A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the component Local API. This manipulation causes information dis...

CVE-2026-116283

A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the comp

来源摘录 · NVD

#cve #cwe-200 #cwe-284

安全公告2026-10-25 发布INFO

Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav...

CVE-2026-116193

Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav that lets unauthenticat

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

安全公告2026-10-25 发布INFO

rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV...

CVE-2026-116190

rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV backend that forwards

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

安全公告2026-10-25 发布INFO

Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure...

CVE-2026-116161

Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure vulnerability in LiveQuer

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

漏洞预警2026-10-25 发布MEDIUM

Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav that lets unauthenticated attackers skip authentication by sending OPTIONS reque...

CVE-2026-116193

Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav that lets unauthenticat

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-25 发布LOW

rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV backend that forwards operator-configured custom credential headers to differen...

CVE-2026-116190

rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV backend that forwards

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-25 发布INFO

Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure vulnerability in LiveQuery. Its subscription hash omits constraints next to a $or ...

CVE-2026-116161

Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure vulnerability in LiveQuer

来源摘录 · NVD

#cve #cwe-200

安全公告2026-10-24 发布INFO

The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password...

CVE-2026-113492

The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading lis

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

安全公告2026-10-24 发布INFO

The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check...

CVE-2026-113490

The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check when rendering a listin

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

漏洞预警2026-10-23 发布INFO

The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. From version 2.0.0 to before version 2.1.48, the WooCommerce purchase event trackin...

CVE-2026-55826

The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. From version 2.0.0 to befo

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-23 发布HIGH

PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the published A2U advisory GHSA-f292-66h9-fpmf says unauthenticated A2U event streaming w...

CVE-2026-57146

PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the published A2U advisory GHSA-

来源摘录 · NVD

#cve #cwe-200 #cwe-306

漏洞预警2026-10-23 发布CRITICAL

PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deployment surface remains unauthenticated in current main and ...

CVE-2026-57116

PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deploy

来源摘录 · NVD

#cve #cwe-200 #cwe-306 #cwe-862

漏洞预警2026-10-23 发布HIGH

PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context Discovery feature exposes artifact helper tools through ctx.get...

CVE-2026-56834

PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context Discov

来源摘录 · NVD

#cve #cwe-200 #cwe-22

安全公告2026-10-23 发布INFO

A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated...

CVE-2026-115449

A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:low

漏洞预警2026-10-22 发布CRITICAL

A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Succes...

CVE-2026-79876

A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated

来源摘录 · NVD

#cve #cwe-200