#cwe-203

共收录 112 条相关情报。

漏洞预警2026-06-20 发布MEDIUM

Capgo before 12.128.2 contains an information disclosure vulnerability in the GET /statistics/app/:app_id endpoint that allows app-limited API keys to distinguish existing sibli...

CVE-2026-56319

Capgo 版本 12.128.2 之前存在一个信息泄露漏洞，位于 GET /statistics/app/:app_id 端点。该端点对 app-limited API 密钥（即只能访问指定应用 ID 的密钥）返回不同的错误响应：当请求的

历史摘要 · 未重新核验 · NVD

#cve #cwe-203

安全公告2026-06-19 发布INFO

Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows...

CVE-2023-54357

Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attacker

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-203 #severity:high

漏洞预警2026-06-19 发布HIGH

Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate user accounts by exploiting the getUserDat...

CVE-2023-54357

Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attacker

来源摘录 · NVD

#cve #cwe-203

漏洞预警2026-06-05 发布INFO

Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security...

CVE-2026-11289

Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cros

历史摘要 · 未重新核验 · NVD

#cve #cwe-1300 #cwe-203

漏洞预警2026-06-05 发布INFO

Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromiu...

CVE-2026-11284

Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to

历史摘要 · 未重新核验 · NVD

#cve #cwe-1300 #cwe-203

漏洞预警2026-05-29 发布MEDIUM

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.219, the password reset endpoint returns visually distinct responses depending on...

CVE-2026-45294

FreeScout 是一个基于 PHP 的 Laravel 框架构建的免费帮助台和共享收件箱系统。在版本 1.8.219 之前，其密码重置端点会针对提交的邮箱地址是否属于有效用户账户返回视觉上不同的响应（例如，存在账户时返回“重置链接已发送

历史摘要 · 未重新核验 · NVD

#cve #cwe-203 #cwe-204

漏洞预警2026-05-28 发布INFO

TREK is a collaborative travel planner. Prior to 3.0.18, early return on missing user during login flow allowed an attacker to enumerate valid user accounts via response timing ...

CVE-2026-45410

TREK is a collaborative travel planner. Prior to 3.0.18, early return on missing user during login flow allowed an attac

历史摘要 · 未重新核验 · NVD

#cve #cwe-203 #cwe-208

安全公告2026-05-10 发布INFO

A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. The impacted...

CVE-2026-8242

A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. The impacted element is the function d

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-203 #severity:low

漏洞预警2026-05-10 发布INFO

A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. The impacted element is the function doAction of the component Login RMI Interface. Performing ...

CVE-2026-8242

A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. The impacted element is the function d

历史摘要 · 未重新核验 · NVD

#cve #cwe-203 #cwe-204

漏洞预警2026-05-07 发布INFO

Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inacce...

CVE-2026-44263

Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowe

历史摘要 · 未重新核验 · NVD

#cve #cwe-203

安全公告2026-05-07 发布INFO

Weblate Vulnerable to Private Translation Enumeration via Screenshot API

CVE-2026-44263

### Impact The screenshots, tasks, and component link API allowed for the enumeration of translations in a project inac

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-203 #severity:medium

漏洞预警2026-04-16 发布MEDIUM

In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate projects and usernames through iterative requests to an specific endpoint.

CVE-2023-5872

In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate projects and usernames th

来源摘录 · NVD

#cve #cwe-203