#cwe-200

共收录 1690 条相关情报。

← 返回所有主题
漏洞预警2026-10-20 发布INFO

The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it adds to the public REST API output, allowing unauthenticated users to read de...

CVE-2026-96902

The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it adds to the public R

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布MEDIUM

A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.

CVE-2026-86979

A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to a

来源摘录 · NVD

漏洞预警2026-10-20 发布MEDIUM

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory.

CVE-2026-86940

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be abl

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be ab...

CVE-2026-86914

An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to ac...

CVE-2026-65379

The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read protected configuration by adding config-*@ directives to page fro...

CVE-2026-112781

Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read protected

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass because the column, contains, filterByValue, index, where, and multisort filters r...

CVE-2026-112771

Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass because the column, conta

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it drops the redacted and cli_onl...

CVE-2026-112192

MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settin

来源摘录 · NVD

漏洞预警2026-10-19 发布INFO

MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted. ...

CVE-2026-112188

MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sens

来源摘录 · NVD

安全公告2026-10-19 发布INFO

Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE...

CVE-2026-103091

Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (H

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-19 发布INFO

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d...

CVE-2026-112027

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f6138

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113...

CVE-2026-111926

Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest h

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2...

CVE-2026-111930

Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspaces/{id}/acl endpoint

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-17 发布INFO

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that...

CVE-2026-111904

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that allows unauthenticated atta

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-16 发布HIGH

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and TestRegistry in backend/api/services/container_registry_...

CVE-2026-96626

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and

来源摘录 · NVD

安全公告2026-10-15 发布INFO

Dio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter`

CVE-2026-103030

### Summary `dio_http2_adapter` follows HTTP `Location` redirects without stripping sensitive request headers when the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious...

CVE-2026-110855

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand env

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

A weakness has been identified in itsmeravitejak Online-Examination-System up to...

CVE-2026-110696

A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e244

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Apprise forwards configured auth headers across cross-origin HTTP redirects

CVE-2026-59180

# Summary Apprise's HTTP-based notification plugins and its HTTP attachment / config loaders (`apprise/attachment/http.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker...

CVE-2026-110146

Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engine

历史摘要 · 未重新核验 · GitHub Advisory