#cwe-203

共收录 112 条相关情报。

漏洞预警2026-08-18 发布INFO

The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality.

CVE-2026-23931

The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values

历史摘要 · 未重新核验 · NVD

#cve #cwe-203

安全公告2026-08-17 发布INFO

A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the...

CVE-2026-19965

A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordRe

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-203 #severity:low

漏洞预警2026-08-17 发布LOW

A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/U...

CVE-2026-19965

CVE-2026-19965 是开源内容管理系统 automad 中一个已公开披露的漏洞，影响版本最高至 2.0.0-beta.32。该漏洞位于密码重置端点的 UserController.php 文件中的 requestPasswordR

历史摘要 · 未重新核验 · NVD

#cve #cwe-203 #cwe-204

漏洞预警2026-08-14 发布INFO

SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/filetree/authFilePublishAccess endpoint, which is registered with CheckAuth only and is reachab...

CVE-2026-73630

SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/filetree/authFilePublishAccess endpoin

历史摘要 · 未重新核验 · NVD

#cve #cwe-203

漏洞预警2026-08-13 发布INFO

Observable Discrepancy (CWE-203) in Kibana Fleet can lead to information disclosure via Excavation (CAPEC-116). Fleet removes the Elasticsearch API key value of an enrolled Elas...

CVE-2026-72632

Observable Discrepancy (CWE-203) in Kibana Fleet can lead to information disclosure via Excavation (CAPEC-116). Fleet re

历史摘要 · 未重新核验 · NVD

#cve #cwe-203

漏洞预警2026-08-13 发布INFO

Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API

CVE-2026-58445

Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API

历史摘要 · 未重新核验 · NVD

#cve #cwe-203 #cwe-639

安全公告2026-08-13 发布INFO

Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API

CVE-2026-58445

Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-203 #cwe-639

漏洞预警2026-08-13 发布INFO

CWE-203: Observable Discrepancy

CVE-2026-59502

CWE-203: Observable Discrepancy

历史摘要 · 未重新核验 · NVD

#cve #cwe-203

漏洞预警2026-08-12 发布INFO

Budibase is an open-source low-code platform. Prior to 3.40.1, packages/server/src/integrations/mongodb.ts passed builder-controlled tlsCertificateKeyFile and tlsCAFile values d...

CVE-2026-73409

Budibase is an open-source low-code platform. Prior to 3.40.1, packages/server/src/integrations/mongodb.ts passed builde

历史摘要 · 未重新核验 · NVD

#cve #cwe-203

漏洞预警2026-08-06 发布INFO

When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. For valid users, the server resolves and displays their can...

CVE-2025-13736

When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. Fo

历史摘要 · 未重新核验 · NVD

#cve #cwe-203

安全公告2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session...

CVE-2026-59640

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-203 #severity:high

漏洞预警2026-08-03 发布INFO

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, a...

CVE-2026-59640

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue

历史摘要 · 未重新核验 · NVD

#cve #cwe-203

安全公告2026-08-03 发布INFO

OpenPGP CFB quick-check oracle active on symmetric/session-key paths

CVE-2026-59640

In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-203

漏洞预警2026-07-29 发布INFO

Xlight FTP Server before 3.9.5 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the server's current GetTickCount() value by send...

CVE-2026-67193

Xlight FTP Server before 3.9.5 contains an information disclosure vulnerability that allows unauthenticated attackers to

历史摘要 · 未重新核验 · NVD

#cve #cwe-203

漏洞预警2026-07-28 发布INFO

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By...

CVE-2026-55555

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack thr

历史摘要 · 未重新核验 · NVD

#cve #cwe-203

安全公告2026-07-28 发布INFO

Dompdf: File existence oracle via font-face stylesheet declaration

CVE-2026-55555

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack thr

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-203

漏洞预警2026-07-27 发布INFO

This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Websites m...

CVE-2026-64713

This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe

历史摘要 · 未重新核验 · NVD

#cve #cwe-203

安全公告2026-07-22 发布INFO

Electric Postgres Sync versions below 1.6.10 contains an information disclosure vulnerability...

CVE-2026-65314

Electric Postgres Sync versions below 1.6.10 contains an information disclosure vulnerability that allows attackers to i

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-203 #severity:medium

漏洞预警2026-07-21 发布INFO

Electric Postgres Sync versions below 1.6.10 contains an information disclosure vulnerability that allows attackers to infer the values of excluded columns by crafting subset wh...

CVE-2026-65314

Electric Postgres Sync versions below 1.6.10 contains an information disclosure vulnerability that allows attackers to i

历史摘要 · 未重新核验 · NVD

#cve #cwe-203

漏洞预警2026-07-21 发布INFO

djangoSIGE through 1.10 (commit a6fe7e8) contains a user enumeration vulnerability in ForgotPasswordView within djangosige/apps/login/views.py that allows unauthenticated attack...

CVE-2026-64822

djangoSIGE through 1.10 (commit a6fe7e8) contains a user enumeration vulnerability in ForgotPasswordView within djangosi

历史摘要 · 未重新核验 · NVD

#cve #cwe-203