#cwe-200

共收录 1778 条相关情报。

漏洞预警2026-07-09 发布INFO

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden from regular users could be leaked thr...

CVE-2026-59828

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions tha

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-07-09 发布INFO

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, restricted tag and tag-group names attached to publicly readable categories...

CVE-2026-49256

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, restricted tag and

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-07-09 发布INFO

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, secure uploads could be exposed by pull_hotlinked_images when an attacker k...

CVE-2026-45788

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, secure uploads cou

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-07-09 发布INFO

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, EventSerializer could expose invited group names, sample invitees, and atte...

CVE-2026-45780

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, EventSerializer co

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-07-09 发布INFO

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book...

CVE-2025-63579

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The secu

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:high

漏洞预警2026-07-09 发布INFO

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed ...

CVE-2025-63579

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The secu

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284 #cwe-311 #cwe-326

漏洞预警2026-07-09 发布INFO

Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, mock server creation in mock-server.service.ts does not persist the isPublic input field while schema....

CVE-2026-59720

Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, mock server creation in mock-server.service.t

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

安全公告2026-07-09 发布INFO

Hoppscotch: Insecure Default Configuration Allows Public Exposure of Private Collection Data via Mock Server

CVE-2026-59720

Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, mock server creation in mock-server.service.t

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-284

漏洞预警2026-07-09 发布INFO

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 before 0.10.0, GET /api/v1/channels//members returned full UserModelResponse obj...

CVE-2026-59222

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 before 0.10.0, GET /api

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-07-09 发布INFO

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, get_event_call delivered execute:python and execute:tool Socket.IO events ...

CVE-2026-59216

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, get_event_call de

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-200 #cwe-639 #cwe-862

漏洞预警2026-07-09 发布INFO

n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated member with use-only editor access to a shared workflow could read c...

CVE-2026-59209

n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated member with

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-522

安全公告2026-07-09 发布INFO

Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials

CVE-2026-59222

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 before 0.10.0, GET /api

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200

安全公告2026-07-09 发布INFO

Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id

CVE-2026-59216

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, get_event_call de

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-639 #cwe-862 #cwe-94

安全公告2026-07-09 发布INFO

n8n: Shared Credential Header Leak via HTTP Request Pagination Expression

CVE-2026-59209

n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated member with

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-522

漏洞预警2026-07-08 发布INFO

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.9.1-alpha.13 and 8.6.83, a LiveQuery subscriber could receive ...

CVE-2026-57481

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.9.1-a

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-07-08 发布INFO

NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries

CVE-2026-49463

## Impact In versions up to and including 3.0.0, two parts of the GraphQL API returned data without checking whether th

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-200 #cwe-285 #severity:medium

漏洞预警2026-07-08 发布INFO

Capgo before 12.128.2 fails to strip EXIF metadata from images uploaded via the app information endpoint, exposing sensitive geolocation data. Attackers can upload images contai...

CVE-2026-56298

Capgo before 12.128.2 fails to strip EXIF metadata from images uploaded via the app information endpoint, exposing sensi

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-07-08 发布INFO

Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST RPC function public.get_total_metrics(org_id), which is callable ...

CVE-2026-56284

Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST RPC func

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-07-08 发布INFO

Capgo (Cap-go/capgo) before 12.128.2 exposes the Supabase PostgREST RPC function public.get_orgs_v6(userid uuid), which is SECURITY DEFINER and granted to the anon role, allowin...

CVE-2026-56226

Capgo (Cap-go/capgo) before 12.128.2 exposes the Supabase PostgREST RPC function public.get_orgs_v6(userid uuid), which

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-07-08 发布INFO

Capgo - EXIF Metadata Exposure in App Information Image Upload

CVE-2026-56298

Capgo before 12.128.2 fails to strip EXIF metadata from images uploaded via the app information endpoint, exposing sensi

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200