#cwe-200

共收录 1690 条相关情报。

漏洞预警2026-10-22 发布INFO

draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulnerable to arbitrary local-file disclosure through the Electron main process's ...

CVE-2026-114606

draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulnerable to arbitrary l

来源摘录 · NVD

#cve #cwe-200 #cwe-22

漏洞预警2026-10-22 发布INFO

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Su...

CVE-2026-114574

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

安全公告2026-10-21 发布INFO

massCodeIO massCode Local HTTP Service index.ts information disclosure

CVE-2026-114574

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-284

漏洞预警2026-10-21 发布INFO

In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could use the Representational State Transfer (REST) API to infer authenti...

CVE-2026-76307

In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could use the Rep

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-10-21 发布INFO

In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in the Representational State Transfer (REST) API to infer password hashes and a...

CVE-2026-76306

In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in the Representational

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-10-21 发布INFO

Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file

CVE-2026-112948

### Summary In Vitest 5, Vite's `server.fs.deny` is not applied as intended on Vitest's dev servers. Depending on the s

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-200 #cwe-552 #severity:medium

安全公告2026-10-21 发布INFO

ApostropheCMS: Exposure of Sensitive Information via predictable export filenames

CVE-2026-112953

## Summary When a user exports content through `@apostrophecms/import-export`, the module copies the generated archive

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-200 #severity:medium

安全公告2026-10-21 发布INFO

A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function...

CVE-2026-113706

A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

漏洞预警2026-10-21 发布INFO

A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/src/task_store/inmemory.rs. The manipulation of the argum...

CVE-2026-113706

A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-10-20 发布MEDIUM

A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file a2a-server/src/error.rs. Executing a manipulation can lea...

CVE-2026-113705

A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file

来源摘录 · NVD

#cve #cwe-200 #cwe-209

漏洞预警2026-10-20 发布LOW

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult...

CVE-2026-91363

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily ex...

CVE-2026-91362

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily ex...

CVE-2026-91360

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily ex...

CVE-2026-91359

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supp

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Transaction Entry). Supported versions that are affected are 12.2.3-12.2.15. Difficu...

CVE-2026-91357

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Transaction Entry). Support

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布HIGH

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5....

CVE-2026-91353

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Conte

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布MEDIUM

Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vuln...

CVE-2026-91339

Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). Supported versions that

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布LOW

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affec...

CVE-2026-91334

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布HIGH

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. ...

CVE-2026-91325

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Su

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-20 发布LOW

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. ...

CVE-2026-91322

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper). Supported ve

来源摘录 · NVD

#cve #cwe-200