#cwe-200

共收录 1829 条相关情报。

漏洞预警2026-06-09 发布INFO

Exposure of sensitive information to an unauthorized actor in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-45594

Exposure of sensitive information to an unauthorized actor in Windows Application Identity (AppID) Subsystem allows an a

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-09 发布INFO

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally.

CVE-2026-42973

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locall

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-09 发布INFO

Exposure of sensitive information to an unauthorized actor in Windows Hyper-V allows an authorized attacker to disclose information locally.

CVE-2026-42972

Exposure of sensitive information to an unauthorized actor in Windows Hyper-V allows an authorized attacker to disclose

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-09 发布INFO

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally.

CVE-2026-42971

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locall

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-09 发布INFO

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally.

CVE-2026-42970

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locall

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-09 发布INFO

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally.

CVE-2026-42907

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose in

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-09 发布INFO

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally.

CVE-2026-42906

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose in

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-09 发布INFO

An information disclosure vulnerability in the NETGEAR Orbi satellites could allow a user connected to your network to gain administrator access to the Orbi router. The listed N...

CVE-2026-0411

An information disclosure vulnerability in the NETGEAR Orbi satellites could allow a user connected to your network to g

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-09 发布INFO

Backend users with file download permissions were able to download files from the fallback storage of the file abstraction layer (FAL) via the Media Module. Since the fallback s...

CVE-2026-49742

Backend users with file download permissions were able to download files from the fallback storage of the file abstracti

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200

漏洞预警2026-06-09 发布INFO

Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed users to gather information about rec...

CVE-2026-47351

Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission ch

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-862

漏洞预警2026-06-09 发布INFO

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to and including 7.0.10. This is due to three compounding design flaw...

CVE-2026-7542

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to and inclu

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-09 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The unlisted question feature did n...

CVE-2026-34905

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache An

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-09 发布INFO

Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVE-2026-41980

Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may a

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-06-08 发布INFO

Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks

CVE-2026-47735

### Summary Arc's user-SQL validator (`internal/api/query.go:ValidateSQLRequest`) blocked only `read_parquet(` and `arc

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-22 #cwe-200 #cwe-918 #severity:high

安全公告2026-06-08 发布INFO

Netty: Unix-socket fd receive leaks descriptors when peer sends two at once

CVE-2026-45536

netty_unix_socket_recvFd sets msg_control to `char control[CMSG_SPACE(sizeof(int))]` (line 940) — 24 bytes on 64-bit Lin

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-200 #cwe-772 #severity:medium

漏洞预警2026-06-08 发布INFO

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, when credentials are fetched with a credentialName filter parame...

CVE-2026-46443

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, when cr

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-06-08 发布INFO

A vulnerability was identified in JeecgBoot up to 3.9.2. Affected by this vulnerability is the...

CVE-2026-11464

A vulnerability was identified in JeecgBoot up to 3.9.2. Affected by this vulnerability is the function queryPageList of

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:low

漏洞预警2026-06-07 发布INFO

A vulnerability was identified in JeecgBoot up to 3.9.2. Affected by this vulnerability is the function queryPageList of the file src\main\java\org\jeecg\modules\system\controll...

CVE-2026-11464

A vulnerability was identified in JeecgBoot up to 3.9.2. Affected by this vulnerability is the function queryPageList of

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

安全公告2026-06-07 发布INFO

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.1. Impacted is an...

CVE-2026-11459

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.1. Impacted is an unknown function in the

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:low

漏洞预警2026-06-07 发布INFO

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.1. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The ...

CVE-2026-11459

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.1. Impacted is an unknown function in the

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284