#cwe-200

共收录 1830 条相关情报。

漏洞预警2026-05-27 发布INFO

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.12.0, /api/totp_setup.php is callable from a session that has ...

CVE-2026-44460

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.12.0,

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-287 #cwe-306

漏洞预警2026-05-27 发布INFO

IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named "Long Term Retention" (LTR) can expose sensitive credentials in debug mode.

CVE-2026-8405

IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named "Long Term Retention

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-05-27 发布INFO

@hapi/wreck leaks sensitive `Proxy-Authorization` header across cross-hostname redirects

CVE-2026-44979

### Impact When `@hapi/wreck` follows a 3xx redirect to a different hostname, only the `Authorization` and `Cookie` head

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-200 #cwe-522 #severity:medium

安全公告2026-05-26 发布INFO

A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive...

CVE-2026-9583

A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This imp

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:low

漏洞预警2026-05-26 发布INFO

A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This impacts an unknown function of the file /index.php of the co...

CVE-2026-9583

A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This imp

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-209

漏洞预警2026-05-26 发布INFO

NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to leak sensitive memory, which might cause limited exposure ...

CVE-2026-24198

NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to l

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-05-23 发布HIGH

Nezha Monitoring: Nezha WebSocket server stream discloses cross-tenant server telemetry to authenticated members

CVE-2026-47124

Nezha Monitoring 是一个开源监控系统，其仪表板 WebSocket 端点存在授权绕过漏洞（CVE-2026-47124）。任何经过认证的非管理员成员都可以连接到 `/api/v1/ws/server` WebSocket 并

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-200 #severity:medium

安全公告2026-05-22 发布INFO

ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model

CVE-2026-47165

The distributed pixel cache was originally designed to operate without a challenge–response authentication model. Howeve

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #nuget #cwe-200 #severity:medium

安全公告2026-05-22 发布INFO

The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is...

CVE-2026-7636

The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Informat

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

漏洞预警2026-05-22 发布MEDIUM

The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 ...

CVE-2026-7636

WordPress插件Slider by Soliloquy（响应式图片轮播）在2.8.1及之前的所有版本中存在敏感信息泄露漏洞。该漏洞位于map_meta_cap函数，允许经过身份验证且具有订阅者级别及以上权限的攻击者提取由管理员或编辑创

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-05-22 发布INFO

There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration...

CVE-2026-44409

There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of the access control m

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

漏洞预警2026-05-22 发布MEDIUM

There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of the access control mechanism, attackers can obtain information without author...

CVE-2026-44409

ZTE MU5250 因访问控制机制配置不当，存在信息泄露漏洞。攻击者可在无需认证的情况下，通过邻近网络利用该漏洞获取敏感信息，导致信息泄露风险。该漏洞的 CVSS 评分为 5.7（中等），影响机密性（高），但对完整性和可用性无影响。目前未

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-05-21 发布INFO

Concrete CMS 9.5.0 and below is vulnerable to unauthenticated file usage disclosure via missing...

CVE-2026-6826

Concrete CMS 9.5.0 and below is vulnerable to unauthenticated file usage disclosure via missing permission check in the

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

漏洞预警2026-05-21 发布INFO

Concrete CMS 9.5.0 and below is vulnerable to unauthenticated file usage disclosure via missing permission check in the usage controller. Any unauthenticated visitor can reque...

CVE-2026-6826

Concrete CMS 9.5.0 and below is vulnerable to unauthenticated file usage disclosure via missing permission check in the

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-20 发布INFO

A path traversal vulnerability exists in the Altium Enterprise Server Viewer StorageController due to improper handling of file path route parameters. On on-premise deployments ...

CVE-2026-9129

A path traversal vulnerability exists in the Altium Enterprise Server Viewer StorageController due to improper handling

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200

漏洞预警2026-05-20 发布INFO

HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow browsers to perform...

CVE-2025-31985

HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Ty

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-20 发布INFO

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7.0.9 via the 'get_stream_data()' function. This mak...

CVE-2026-6728

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and includ

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-05-20 发布INFO

The All in One SEO plugin for WordPress is vulnerable to Sensitive Information Exposure via ...

CVE-2026-5075

The All in One SEO plugin for WordPress is vulnerable to Sensitive Information Exposure via 'internalOptions' localized

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium

漏洞预警2026-05-20 发布INFO

The All in One SEO plugin for WordPress is vulnerable to Sensitive Information Exposure via 'internalOptions' localized script data in versions up to, and including, 4.9.7 due t...

CVE-2026-5075

The All in One SEO plugin for WordPress is vulnerable to Sensitive Information Exposure via 'internalOptions' localized

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-20 发布INFO

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow a bugnote author to access the note's Revisions page after losing access to the pa...

CVE-2026-34970

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and prior allow a bugnote author to acces

历史摘要 · 未重新核验 · NVD

#cve #cwe-200