#cwe-200

共收录 1830 条相关情报。

漏洞预警2026-06-03 发布INFO

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 exposes an undocumented /agileconfigreset endpoint that returns internal buffer contents to unauthenticated attackers on...

CVE-2026-36615

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 exposes an undocumented /agileconfigreset endpoint that returns

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-03 发布INFO

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized buffer when receiving POST requests without SOAPAction header on UPnP port 1900, expo...

CVE-2026-36611

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized buffer when receiving POST r

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-03 发布INFO

It is possible for an unauthenticated adjacent attacker to download log files of the controller, which may disclose some restricted information.

CVE-2026-41032

It is possible for an unauthenticated adjacent attacker to download log files of the controller, which may disclose some

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-02 发布INFO

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the Model Context Protocol (MCP) server integration resolves $...

CVE-2026-32625

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the M

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-02 发布INFO

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Java TLS ioctl probe reads user-controlled ioct...

CVE-2026-45683

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0

历史摘要 · 未重新核验 · NVD

#cve #cwe-127 #cwe-200

漏洞预警2026-06-02 发布INFO

NiceGUI is a Python-based UI framework. Prior to version 3.12.0, ui.restructured_text() renders reStructuredText server-side with Docutils without disabling file insertion direc...

CVE-2026-45553

NiceGUI is a Python-based UI framework. Prior to version 3.12.0, ui.restructured_text() renders reStructuredText server-

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-02 发布INFO

Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, improper access control allows disclosure of password hash. This issue has ...

CVE-2026-45080

Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, improper access co

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-06-02 发布INFO

D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability. Application registers multiple custom URL handlers that could be ex...

CVE-2026-8993

D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability. Applicatio

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-200

安全公告2026-06-02 发布INFO

Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure....

CVE-2026-40965

Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a vul

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:critical

漏洞预警2026-06-01 发布INFO

eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that ...

CVE-2026-28511

eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user perfo

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-01 发布INFO

Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a vulnerability where EC (Elliptic Curve) private keys are ina...

CVE-2026-40965

Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure. The server contains a vul

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-01 发布INFO

Nextcloud is an open source content collaboration platform. From versions 5.5.13 to before 5.5.17, and 6.2.0 to before 6.2.3, an authenticated user can enumerate users on the sa...

CVE-2026-45286

Nextcloud is an open source content collaboration platform. From versions 5.5.13 to before 5.5.17, and 6.2.0 to before 6

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-01 发布INFO

Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workfl...

CVE-2026-45277

Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arb

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-06-01 发布INFO

Nextcloud is an open source content collaboration platform. Prior to version 5.2.6, a missing permissions check allowed users to request reading form submissions of other users....

CVE-2026-45267

Nextcloud is an open source content collaboration platform. Prior to version 5.2.6, a missing permissions check allowed

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-862

漏洞预警2026-06-01 发布INFO

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/. This manipulation causes file and directory in...

CVE-2026-10254

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-538

漏洞预警2026-06-01 发布MEDIUM

A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g. nested `password` / `token` / `secret` / `api_key` keys inside a JSON templa...

CVE-2026-42360

A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g. nested `password` /

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-06-01 发布MEDIUM

A bug in Apache Airflow's Variable response masker caused nested-key redaction (triggered by secret-suffixed key names like `password`, `token`, `secret`, `api_key`) to be bypas...

CVE-2026-42358

A bug in Apache Airflow's Variable response masker caused nested-key redaction (triggered by secret-suffixed key names l

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-06-01 发布MEDIUM

A bug in the GET `/api/v2/connections/{connection_id}` REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connection-read permission to retrieve secre...

CVE-2026-45192

A bug in the GET `/api/v2/connections/{connection_id}` REST API endpoint in Apache Airflow allowed an authenticated UI/A

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-06-01 发布INFO

An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to other groups. Please note that the featu...

CVE-2026-48189

An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which a

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-06-01 发布INFO

An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to...

CVE-2026-48210

An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible f

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium