#cwe-201

共收录 216 条相关情报。

← 返回所有主题
漏洞预警2026-09-17 发布INFO

punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to a private inbox. Prior to 1.5.0, handleInbound delivers inbound alias mail w...

CVE-2026-54649

punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to a private inbox. Pr

历史摘要 · 未重新核验 · NVD

安全公告2026-09-17 发布INFO

punchin-email: Operator inbox (FORWARD_TO) disclosed to correspondents on reply — Cloudflare forward() drops the relay Reply-To

CVE-2026-54649

punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to a private inbox. Pr

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-15 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that certain conditions could have al...

CVE-2026-82837

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.2 before 19.2.6, and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Atta...

CVE-2026-91198

GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by una

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obt...

CVE-2026-89332

Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive Data. This issue affects ElasticPress: from n/a through ...

CVE-2026-62088

Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive

历史摘要 · 未重新核验 · NVD

安全公告2026-09-10 发布INFO

Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication

CVE-2026-87015

## Summary When more than one external tool server is reachable in the same request, a tool call to a server configured

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-10 发布INFO

Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore &amp; Migration <= 2.4.2 versions.

CVE-2026-81804

Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore &amp; Migration <= 2.4.2 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension < 2.3.0 - The front-end JSON editor endpoint exposes an action called co...

CVE-2026-78374

Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension < 2.3.0 - The f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

Joomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in SP Property < 4.1.4 - Booking inquiries previously relied on client-...

CVE-2026-78303

Joomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in SP Property

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-09 发布INFO

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1, backend/open_webui/utils/tools.py captured a cookie jar from the ...

CVE-2026-87015

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1, backend/

历史摘要 · 未重新核验 · NVD

安全公告2026-09-09 发布INFO

Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication

CVE-2026-87015

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1, backend/

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-08 发布INFO

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.

CVE-2026-65812

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclo

历史摘要 · 未重新核验 · NVD

安全公告2026-09-07 发布INFO

In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication...

CVE-2026-86497

In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administra

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-07 发布INFO

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to...

CVE-2026-86505

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-07 发布INFO

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace

CVE-2026-86505

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administrator to exfiltrate stored mailbox credentials

CVE-2026-86497

In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Insertion of Sensitive Information Into Sent Data vulnerability in Kevin Pirnie KP Agent Ready allows Retrieve Embedded Sensitive Data. This issue affects KP Agent Ready: from ...

CVE-2026-85307

Insertion of Sensitive Information Into Sent Data vulnerability in Kevin Pirnie KP Agent Ready allows Retrieve Embedded

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

Hurl: Cookies in Cookies section leak when redirecting to a different host

CVE-2026-63481

## The Bug Hurl <= 8.0.1 lets you define cookies two ways in a .hurl file: 1. As a raw Cookie: header in the [Header]/

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability...

CVE-2026-77123

Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account hold

历史摘要 · 未重新核验 · GitHub Advisory