#cwe-200

共收录 1830 条相关情报。

漏洞预警2026-05-31 发布INFO

An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and prevent users from disab...

CVE-2026-48210

An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible f

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-269

安全公告2026-05-29 发布INFO

PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate

CVE-2026-47394

## Summary The fix for GHSA-9mqq-jqxf-grvw / CVE-2026-44336 is incomplete. The original advisory description named four

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-22 #cwe-200 #cwe-862 #severity:high

安全公告2026-05-29 发布INFO

PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context

CVE-2026-47395

### Summary PraisonAI's direct-prompt CLI automatically expands `@url:` mentions in raw prompt text before agent execut

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-200 #severity:medium

安全公告2026-05-29 发布INFO

Admidio writes session IDs and auto-login cookie values to application logs

CVE-2026-47234

## Summary When debug logging is enabled, `Session::setCookie()` logs full cookie values and `Session::start()` logs th

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-200 #cwe-532 #severity:medium

漏洞预警2026-05-29 发布INFO

The Breeze plugin for WordPress is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in all versions up to, and including, 2.5.2 This is due to improper v...

CVE-2026-2128

The Breeze plugin for WordPress is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in all versi

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-29 发布INFO

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 6.3.7. This is d...

CVE-2026-8995

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Sensitive Information

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-28 发布INFO

Inappropriate implementation in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin...

CVE-2026-9991

Inappropriate implementation in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-28 发布INFO

Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a cra...

CVE-2026-9981

Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potent

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-28 发布INFO

Inappropriate implementation in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securi...

CVE-2026-9955

Inappropriate implementation in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker to leak cr

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-28 发布INFO

Inappropriate implementation in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium ...

CVE-2026-9929

Inappropriate implementation in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to l

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-28 发布INFO

Inappropriate implementation in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory...

CVE-2026-9912

Inappropriate implementation in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obt

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-28 发布INFO

Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a ...

CVE-2026-10011

Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromi

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-28 发布INFO

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. ...

CVE-2026-44881

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-200

漏洞预警2026-05-28 发布INFO

Vulnerability in Oracle REST Data Services (component: General). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated...

CVE-2026-46841

Vulnerability in Oracle REST Data Services (component: General). Supported versions that are affected are 24.2.0-26.1.0

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-28 发布INFO

Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticate...

CVE-2026-46830

Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-28 发布INFO

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, the RustFS console endpoint GET /rustfs/console/license returns parsed license metadata witho...

CVE-2026-47136

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, the RustFS console endpoint GET /rus

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-306

漏洞预警2026-05-28 发布INFO

Automad is a flat-file content management system and template engine. From 2.0.0-alpha.1 to 2.0.0-beta.27, a Broken Access Control vulnerability allows an unauthenticated attack...

CVE-2026-45332

Automad is a flat-file content management system and template engine. From 2.0.0-alpha.1 to 2.0.0-beta.27, a Broken Acce

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-306

安全公告2026-05-27 发布INFO

Automad has Broken Access Control: Unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint

CVE-2026-45332

### Summary A Broken Access Control vulnerability allows an unauthenticated attacker to retrieve the bcrypt password h

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-200 #cwe-306 #severity:high

漏洞预警2026-05-27 发布INFO

FacturaScripts is an open source accounting and invoicing software. Prior to v2026, an unauthenticated information disclosure vulnerability in the Installer controller allows an...

CVE-2026-42878

FacturaScripts is an open source accounting and invoicing software. Prior to v2026, an unauthenticated information discl

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-27 发布INFO

Budibase is an open-source low-code platform. Prior to 3.38.3, removeSecrets at packages/server/src/sdk/workspace/datasources/datasources.ts masks only datasource config fields ...

CVE-2026-46427

Budibase is an open-source low-code platform. Prior to 3.38.3, removeSecrets at packages/server/src/sdk/workspace/dataso

历史摘要 · 未重新核验 · NVD

#cve #cwe-200