#cwe-200

共收录 1830 条相关情报。

漏洞预警2026-05-12 发布INFO

Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network.

CVE-2026-40374

Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose i

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-12 发布INFO

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, every MCP write tool (send_tokens, execute_contract, instantiate_contract, upload_wasm, ibc_...

CVE-2026-43992

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, every MCP write tool (send_tokens,

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-312 #cwe-522 #cwe-532

安全公告2026-05-12 发布INFO

sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)

CVE-2026-45091

In sealed-env enterprise mode, versions 0.1.0-alpha.1 through 0.1.0-alpha.3 embedded the operator's literal TOTP secret

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #maven #cwe-200 #cwe-522 #severity:critical

漏洞预警2026-05-11 发布INFO

WWBN AVideo is an open source video platform. In versions up to and including 29.0, an unauthenticated user can read APISecret from objects/plugins.json.php and use it to call p...

CVE-2026-43885

WWBN AVideo is an open source video platform. In versions up to and including 29.0, an unauthenticated user can read API

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-862

漏洞预警2026-05-11 发布INFO

jotty·page is a self-hosted app for your checklists and notes. Prior to 1.22.0, an unauthenticated path traversal vulnerability exists in /api/app-icons/[filename]. The filename...

CVE-2026-42564

jotty·page is a self-hosted app for your checklists and notes. Prior to 1.22.0, an unauthenticated path traversal vulner

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-200

漏洞预警2026-05-11 发布INFO

WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, when attempting to upload a file with malicious content to funcionario/docdependente_upload.php,...

CVE-2026-42873

WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, when attempting to upload a file with m

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-05-11 发布INFO

MantisBT: Bugnote Revision Page Leaks Private Issue Metadata After Issue Access Is Revoked

CVE-2026-34970

MantisBT allows a bugnote author to access the note's Revisions page after losing access to the parent private issue. #

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-200 #severity:medium

安全公告2026-05-11 发布INFO

MantisBT has an authorization bypass that allows reading attachments after losing access to a private issue

CVE-2026-34744

MantisBT permits a user to list and download their own attachments from an Issue created by another user, even after tha

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-200 #severity:medium

漏洞预警2026-05-11 发布INFO

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, atendido/familiar_docfamiliar.php displays an overly descriptive error message, including databas...

CVE-2026-42871

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, atendido/familiar_docfamiliar.php displa

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-11 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo. This vulnerability is associated with program files includes/Api/ApiEcho...

CVE-2026-5266

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo. This vulnerabil

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-11 发布INFO

Inbox Zero is an AI personal assistant for email. Prior to 2.29.3, the cleaner email stream endpoint used a shared Redis subscription listener, which could deliver thread events...

CVE-2026-42865

Inbox Zero is an AI personal assistant for email. Prior to 2.29.3, the cleaner email stream endpoint used a shared Redis

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-11 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Specia...

CVE-2026-34093

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulne

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-11 发布INFO

Grav is a file-based Web platform. Prior to 2.0.0-rc.2, the Twig sandbox allow-list permits any user with the admin.pages role to call config.toArray() from within a page body, ...

CVE-2026-44738

Grav is a file-based Web platform. Prior to 2.0.0-rc.2, the Twig sandbox allow-list permits any user with the admin.page

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-11 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Skin/S...

CVE-2026-34092

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulne

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-11 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.

CVE-2026-34091

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-11 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser. This issue affects CheckUser: from 1.45.0 before 1.45.2.

CVE-2026-34090

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser. This issue

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-11 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.

CVE-2026-34088

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-11 发布INFO

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation OATHAuth. This issue affects OATHAuth: from * before 1.43.7, 1.44.4, 1.45.2.

CVE-2026-34087

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation OATHAuth. This issue a

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

漏洞预警2026-05-09 发布INFO

Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation. Prior to versions 2.11.1-lts, 2.16.0-lts, and 2.17.0, the generated ...

CVE-2026-42333

Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation. Prior to ve

历史摘要 · 未重新核验 · NVD

#cve #cwe-200

安全公告2026-05-09 发布INFO

The Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin for...

CVE-2026-8198

The Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin for WordPress is vulnerable to A

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-200 #severity:medium