#cwe-203

共收录 112 条相关情报。

← 返回所有主题
漏洞预警2026-09-15 发布INFO

The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered user accounts based on the responses received during the OT...

CVE-2025-13166

The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered us

历史摘要 · 未重新核验 · NVD

安全公告2026-09-09 发布INFO

Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...

CVE-2026-87623

Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engine

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-09 发布INFO

Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...

CVE-2026-87620

Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive info

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-09 发布INFO

Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote...

CVE-2026-87619

Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-28 发布INFO

WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowing a remote attacker to perform automated password guessin...

CVE-2026-78617

WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

Observable discrepancy vulnerability in Seres Software syWEB allows Account Footprinting. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was ...

CVE-2026-11754

Observable discrepancy vulnerability in Seres Software syWEB allows Account Footprinting. This issue affects syWEB: thr

历史摘要 · 未重新核验 · NVD

安全公告2026-08-25 发布INFO

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...

CVE-2026-79287

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-25 发布INFO

Observable discrepancy in HTML in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...

CVE-2026-79242

Observable discrepancy in HTML in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive inf

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-25 发布INFO

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security sev...

CVE-2026-79287

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Observable discrepancy in HTML in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security seve...

CVE-2026-79242

Observable discrepancy in HTML in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive inf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security seve...

CVE-2026-79181

Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive inf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security ...

CVE-2026-79030

Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security s...

CVE-2026-79028

Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Observable discrepancy in SVG in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity:...

CVE-2026-79016

Observable discrepancy in SVG in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chr...

CVE-2026-78955

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potential

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium...

CVE-2026-78949

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium...

CVE-2026-78936

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

The Grav Login plugin (getgrav/grav-plugin-login) before 3.9.1 is vulnerable to email address enumeration. The register() method in classes/Login.php throws a distinct exception...

CVE-2026-72699

The Grav Login plugin (getgrav/grav-plugin-login) before 3.9.1 is vulnerable to email address enumeration. The register(

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird ...

CVE-2026-74954

Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity.

CVE-2026-23937

The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential

历史摘要 · 未重新核验 · NVD