Cyber Security Daily Radar

#cwe-200

共收录 1721 条相关情报。

← 返回所有主题
漏洞预警2026-08-15 发布MEDIUM

siyuan versions <= 3.7.3 (fixed in v3.7.4) contain a server-side template injection vulnerability in the attribute-view Template calculation feature (introduced in v3.7.0-beta.1...

CVE-2026-73047

CVE-2026-73047 影响 siyuan 笔记软件 3.7.3 及更早版本，已在 v3.7.4 中修复。该漏洞属于服务端模板注入（SSTI），源于属性视图中的“模板计算”功能（该功能自 v3.7.0-beta.1 引入）所依赖的模板

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
安全公告2026-08-14 发布INFO

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication...

CVE-2026-66272

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vul

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-200#severity:medium
安全公告2026-08-14 发布INFO

A weakness has been identified in Webkul Bagisto up to 2.4.4. This affects an unknown part of the...

CVE-2026-19837

A weakness has been identified in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /admin/customers/

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-200#severity:low
漏洞预警2026-08-14 发布INFO

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote acces...

CVE-2026-66272

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vul

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
漏洞预警2026-08-14 发布INFO

A weakness has been identified in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /admin/customers/search of the component Customer Search. Executing a mani...

CVE-2026-19837

A weakness has been identified in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /admin/customers/

历史摘要 · 未重新核验 · NVD

#cve#cwe-200#cwe-284
漏洞预警2026-08-14 发布INFO

filebrowser before 2.63.19 contains a permission bypass in the /api/resources endpoint. The checksum (?checksum=) branch of resourceGetHandler reads the entire file to compute a...

CVE-2026-72834

filebrowser before 2.63.19 contains a permission bypass in the /api/resources endpoint. The checksum (?checksum=) branch

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
漏洞预警2026-08-13 发布INFO

Budibase is an open-source low-code platform. Prior to 3.39.25, GET /api/users/metadata and GET /api/users/metadata/:id returned user objects processed by packages/server/src/ut...

CVE-2026-73304

Budibase is an open-source low-code platform. Prior to 3.39.25, GET /api/users/metadata and GET /api/users/metadata/:id

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
安全公告2026-08-13 发布INFO

Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoints to Power-Role Users

CVE-2026-73304

Budibase is an open-source low-code platform. Prior to 3.39.25, GET /api/users/metadata and GET /api/users/metadata/:id

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-200
安全公告2026-08-13 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to...

CVE-2026-18068

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to a byte-count and eleme

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-200#severity:medium
安全公告2026-08-13 发布INFO

A lower privileged user who holds only the privilege to read agent policies can read the entire...

CVE-2026-72670

A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a confi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-200#severity:high
漏洞预警2026-08-13 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to a byte-count and element-count confusion.

CVE-2026-18068

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to a byte-count and eleme

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
漏洞预警2026-08-13 发布INFO

A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet ...

CVE-2026-72670

A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a confi

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
漏洞预警2026-08-13 发布INFO

Webhook Authorization Header Returned in Plaintext via API

CVE-2026-58511

Webhook Authorization Header Returned in Plaintext via API

历史摘要 · 未重新核验 · NVD

#cve#cwe-200
漏洞预警2026-08-13 发布INFO

GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private

CVE-2026-58510

GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on pu

历史摘要 · 未重新核验 · NVD

#cve#cwe-200#cwe-281#cwe-359
漏洞预警2026-08-13 发布INFO

Repository migration SSRF via multi-answer DNS allow-list bypass

CVE-2026-58442

Repository migration SSRF via multi-answer DNS allow-list bypass

历史摘要 · 未重新核验 · NVD

#cve#cwe-200#cwe-918
漏洞预警2026-08-13 发布INFO

Private Repository Metadata Remains Accessible After Access Revocation

CVE-2026-58434

Private Repository Metadata Remains Accessible After Access Revocation

历史摘要 · 未重新核验 · NVD

#cve#cwe-200#cwe-862
漏洞预警2026-08-13 发布INFO

Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an ...

CVE-2026-58432

Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Criti

历史摘要 · 未重新核验 · NVD

#cve#cwe-200#cwe-639#cwe-732#cwe-862
漏洞预警2026-08-13 发布INFO

Private org member list leaked via /members API endpoint — incomplete fix for PR #38145

CVE-2026-58427

Private org member list leaked via /members API endpoint — incomplete fix for PR #38145

历史摘要 · 未重新核验 · NVD

#cve#cwe-200#cwe-863
漏洞预警2026-08-13 发布INFO

OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)

CVE-2026-58425

OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)

历史摘要 · 未重新核验 · NVD

#cve#cwe-200#cwe-863
漏洞预警2026-08-13 发布INFO

Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs

CVE-2026-57897

Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs

历史摘要 · 未重新核验 · NVD

#cve#cwe-200#cwe-863