#cwe-200

共收录 1830 条相关情报。

← 返回所有主题

漏洞预警2026-06-07 发布INFO

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.1. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The ...

CVE-2026-11459

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.1. Impacted is an unknown function in the

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

安全公告2026-06-07 发布INFO

A weakness has been identified in erzhongxmu JeeWMS up to...

CVE-2026-11458

A weakness has been identified in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This issue affects s

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

漏洞预警2026-06-07 发布INFO

A weakness has been identified in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This issue affects some unknown processing of the file /base-boot/actuator of...

CVE-2026-11458

A weakness has been identified in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This issue affects s

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

安全公告2026-06-06 发布INFO

A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared...

CVE-2026-11424

A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared by Altium Enterprise Ser

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:high

漏洞预警2026-06-05 发布INFO

A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted pat...

CVE-2026-11431

A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and A

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200

漏洞预警2026-06-05 发布INFO

A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared by Altium Enterprise Server and Altium 365. An authenticated user can submit a re...

CVE-2026-11424

A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared by Altium Enterprise Ser

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-918

安全公告2026-06-05 发布INFO

Shopper: Multiple data integrity and disclosure issues in admin Livewire components

CVE-2026-47743

## Impact Three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and sto

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-79 #cwe-200 #cwe-639 #severity:high

漏洞预警2026-06-05 发布INFO

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Versions on the 2.x branch prior to 2.15.0 ...

CVE-2026-45300

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-05 发布INFO

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the `hmacBase64()` function in the HAXcms Node.js backend contains two critical cry...

CVE-2026-46395

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the `hmacBase64()` functio

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-321 #cwe-327

漏洞预警2026-06-05 发布INFO

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-...

CVE-2026-11271

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convince

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-04 发布INFO

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.

CVE-2026-47655

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-04 发布INFO

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensit...

CVE-2026-11209

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had comp

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-04 发布INFO

Inappropriate implementation in GPU in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securit...

CVE-2026-11203

Inappropriate implementation in GPU in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to leak cro

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-04 发布INFO

Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sever...

CVE-2026-11182

Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-orig

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-04 发布INFO

Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sever...

CVE-2026-11180

Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-orig

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-04 发布INFO

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensi...

CVE-2026-11168

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had com

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-04 发布INFO

Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sever...

CVE-2026-11162

Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-orig

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-03 发布INFO

FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 leak the exact system version through asset cache buster parameters in HTML outp...

CVE-2026-40495

FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 leak the exact system v

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-06-03 发布INFO

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized...

CVE-2026-36611

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized buffer when receiving POST r

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:high

漏洞预警2026-06-03 发布INFO

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 responds to version.bind CHAOS TXT queries, disclosing the DNS resolver software version (unbound 1.22.0), aiding target...

CVE-2026-36618

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 responds to version.bind CHAOS TXT queries, disclosing the DNS

历史摘要 · 未重新核验 · NVD

#cve #cwe-200