#cwe-200

共收录 1778 条相关情报。

漏洞预警2026-07-14 发布INFO

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

CVE-2026-41087

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-07-14 发布INFO

Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally.

CVE-2026-34328

Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to dis

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-07-13 发布INFO

The Smart Slider 3 plugin for WordPress is vulnerable to Sensitive Information Exposure in all...

CVE-2026-12385

The Smart Slider 3 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inclu

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

漏洞预警2026-07-13 发布INFO

The Smart Slider 3 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.1.37 via the 'keyword' parameter. This makes it...

CVE-2026-12385

The Smart Slider 3 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inclu

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-07-13 发布INFO

Decidim: Verification documents can be downloaded through reusable links

CVE-2026-45378

## Description Scanned identity-document images provided by participants and shown in the verification admin workflow a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rubygems #cwe-200 #severity:high

漏洞预警2026-07-13 发布INFO

A flaw has been found in WuzhiCMS up to 4.1.0. Affected by this vulnerability is the function config/listimage of the file /index.php?m=attachment&f=index&v=upload of the compon...

CVE-2026-15530

A flaw has been found in WuzhiCMS up to 4.1.0. Affected by this vulnerability is the function config/listimage of the fi

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

安全公告2026-07-12 发布INFO

Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated ...

CVE-2026-56336

Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /private/sso/check-domain

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

安全公告2026-07-12 发布INFO

Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server...

CVE-2026-56259

Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:high

安全公告2026-07-12 发布INFO

Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST...

CVE-2026-56238

Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST global_stats endpoint t

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:high

漏洞预警2026-07-12 发布INFO

Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /private/sso/check-domain endpoint that returns internal org_id and provider_id val...

CVE-2026-56336

Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /private/sso/check-domain

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-07-12 发布INFO

Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to redirect LLM API calls to attacker-controlled endpoints a...

CVE-2026-56259

Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-07-12 发布INFO

Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST global_stats endpoint that allows unauthenticated attackers to read sensitive fi...

CVE-2026-56238

Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST global_stats endpoint t

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-07-12 发布INFO

Capgo - Information Disclosure via Unauthenticated SSO check-domain Endpoint

CVE-2026-56336

Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /private/sso/check-domain

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200

安全公告2026-07-12 发布INFO

Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution

CVE-2026-56259

Crawl4AI before 0.8.8 contains credential exfiltration vulnerabilities in the Docker API server that allow attackers to

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200

安全公告2026-07-12 发布INFO

Capgo - Unauthenticated Information Disclosure via PostgREST global_stats Endpoint

CVE-2026-56238

Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST global_stats endpoint t

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200

安全公告2026-07-11 发布INFO

The Grav Admin2 plugin (getgrav/grav-plugin-admin2) before 2.0.4 embeds a global JavaScript...

CVE-2026-61454

The Grav Admin2 plugin (getgrav/grav-plugin-admin2) before 2.0.4 embeds a global JavaScript variable window.__GRAV_CONFI

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:high

安全公告2026-07-11 发布INFO

PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces...

CVE-2026-61426

PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requireme

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:high

安全公告2026-07-11 发布INFO

Capgo before 12.128.2 contains an information disclosure vulnerability in the...

CVE-2026-56303

Capgo before 12.128.2 contains an information disclosure vulnerability in the find_apikey_by_value PostgreSQL function m

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:high

漏洞预警2026-07-11 发布MEDIUM

The Grav Admin2 plugin (getgrav/grav-plugin-admin2) before 2.0.4 embeds a global JavaScript variable window.__GRAV_CONFIG__ in the Admin2 SPA bootstrap page at /grav/admin (and ...

CVE-2026-61454

CVE-2026-61454 影响 Grav Admin2 插件 (getgrav/grav-plugin-admin2) 版本 2.0.4 之前。该插件在 Admin2 SPA 引导页面 (/grav/admin 及其子路由) 中嵌入了一

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-07-11 发布INFO

PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requirement and wildcard CORS. Unauthenticated attackers can call ...

CVE-2026-61426

PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key requireme

历史摘要 · 未重新核验 · NVD

#cve #cwe-200