#cwe-200

共收录 1721 条相关情报。

漏洞预警2026-08-21 发布MEDIUM

Arc is an open, SQL-native time-series database for telemetry. Versions prior to 26.06.1 register Go's `net/http/pprof` handlers at `/debug/pprof/*` via `app.Use(pprof.New())` i...

CVE-2026-48050

CVE-2026-48050 涉及 Arc 时间序列数据库（一个面向遥测数据的 SQL 原生时序数据库）中的一个安全漏洞。在 26.06.1 之前的版本中，Arc 在 internal/api/server.go 中通过 app.Use(p

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-306 #cwe-400

漏洞预警2026-08-21 发布HIGH

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator (`internal/api/query.go:ValidateSQLRequest`) blocked only `read...

CVE-2026-47735

CVE-2026-47735 是 Arc 时间序列数据库中一个严重的输入验证绕过漏洞。Arc 允许用户执行 SQL 查询，但其验证机制存在缺陷：仅使用简单的正则表达式黑名单阻止了 `read_parquet(` 和 `arc_partiti

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200 #cwe-918

漏洞预警2026-08-21 发布HIGH

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, only classes present in the SELECT clause are protected by the silos access check in OQL. This issue has ...

CVE-2026-34948

Combodo iTop 是一个基于 Web 的 IT 服务管理工具，广泛用于企业 IT 运维管理。该工具在 3.2.3 之前的版本中，OQL（对象查询语言）的访问控制存在缺陷，具体表现为：在执行 OQL 查询时，系统仅对 SELECT 子

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-08-21 发布INFO

CrossWatch (CW) is a synchronization engine. Prior to version 0.9.21, GET /api/app-auth/status is accessible without authentication and returns the other_sessions array, which e...

CVE-2026-53497

CrossWatch (CW) is a synchronization engine. Prior to version 0.9.21, GET /api/app-auth/status is accessible without aut

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-359

安全公告2026-08-21 发布INFO

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through...

CVE-2026-69225

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that m

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

安全公告2026-08-21 发布INFO

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and...

CVE-2026-69224

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under diff

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

漏洞预警2026-08-21 发布INFO

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect se...

CVE-2026-69225

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that m

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-08-21 发布INFO

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthen...

CVE-2026-69224

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under diff

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-08-21 发布INFO

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, ufo/client/mcp/http_servers/linux_mcp_server.py binds a FastMCP stre...

CVE-2026-62316

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, ufo/client/

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-346

漏洞预警2026-08-21 发布INFO

Git for Windows is the Windows port of Git. Prior to 2.55.0.windows.4, a malicious remote Git server can advertise a bundle URI that reaches transport_get_remote_bundle_uri(), f...

CVE-2026-62960

Git for Windows is the Windows port of Git. Prior to 2.55.0.windows.4, a malicious remote Git server can advertise a bun

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-610

漏洞预警2026-08-21 发布INFO

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, unauthenticated users can access uploaded sensitive via sniffed url. This issue has been fixed in version...

CVE-2026-30866

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, unauthenticated users can access uploaded sensit

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-306

漏洞预警2026-08-21 发布INFO

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, the HTML title attribute of the logo in the login page contains the complete iTop version. This issue has...

CVE-2026-27463

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, the HTML title attribute of the logo in the logi

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-08-21 发布INFO

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Fr...

CVE-2026-71862

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-522

漏洞预警2026-08-21 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Webhook module while listing and deleting deliveries. This issue affects Apache ...

CVE-2026-65613

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Webhook module while lis

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-08-21 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth2 authentication plugin and Google OAuth integration. This issue affects Ap...

CVE-2026-61397

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth2 authentication pl

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-08-21 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's LDAP authentication plugin while listing LDAP providers. LDAP configur...

CVE-2026-59780

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's LDAP authentication plug

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-08-21 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth authentication plugin while listing OAuth providers. This issue affects Ap...

CVE-2026-59655

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth authentication plu

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-08-21 发布INFO

Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Userdata reference APIs. Several userdata-related APIs in...

CVE-2026-50222

Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's U

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-862

漏洞预警2026-08-21 发布INFO

The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, met...

CVE-2026-19435

The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allo

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-08-21 发布INFO

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not restrict access to per-vendor commission configuration returned by on...

CVE-2026-16575

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not restrict acc

历史摘要 · 未重新核验 · NVD

#cve #cwe-200