#cwe-209

共收录 131 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布INFO

jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, `middleware/handle-error.ts` serializes raw `FetchError` objects into HTTP...

CVE-2026-62979

jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, `middleware/handl

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execution error data when operations fail in the Git, MongoDB Atlas Vector Store, a...

CVE-2026-118643

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execution error data when

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-28 发布INFO

HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensit...

CVE-2026-67080

HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布MEDIUM

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext.dispatchExpressionError of the file renderers/web_core/src/v0_9/rendering/da...

CVE-2026-118272

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext.dispatchExpressionE

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

Tanium addressed an information disclosure vulnerability in Tanium Server.

CVE-2026-108316

Tanium addressed an information disclosure vulnerability in Tanium Server.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the component JSON-RPC Error Handler. This manipulation causes informatio...

CVE-2026-116479

A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the component JS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handle...

CVE-2026-116478

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2as

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布MEDIUM

A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element is the function A2AJsonRpcProcessor.ProcessRequestAsync of the fil...

CVE-2026-116477

A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element is the fu

来源摘录 · NVD

漏洞预警2026-10-22 发布MEDIUM

webpack-dev-server is a development server that provides live reloading for webpack projects. In versions from 5.1.0 before 5.2.7 and in version 6.0.0, the unauthenticated open-...

CVE-2026-114348

webpack-dev-server is a development server that provides live reloading for webpack projects. In versions from 5.1.0 bef

来源摘录 · NVD

漏洞预警2026-10-20 发布MEDIUM

A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file a2a-server/src/error.rs. Executing a manipulation can lea...

CVE-2026-113705

A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

Vite is a frontend tooling framework for JavaScript. From 8.2.0 until 8.2.4 and 8.3.3, the first 4 bytes of files outside of server.fs setting can be returned to the browser by ...

CVE-2026-112947

Vite is a frontend tooling framework for JavaScript. From 8.2.0 until 8.2.4 and 8.3.3, the first 4 bytes of files outsid

历史摘要 · 未重新核验 · NVD

安全公告2026-10-17 发布INFO

Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5...

CVE-2026-110889

Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows R

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator. ...

CVE-2026-86607

Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator. This issue affects Hitach

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布MEDIUM

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-83786

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose i

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.

CVE-2026-52394

DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwo...

CVE-2026-85115

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affect

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker to read internal Elixir terms from an...

CVE-2026-105283

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unaut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the `/web/<path:filename>` route in `src/pyload/webui/app/blueprints/app_blueprint....

CVE-2026-75597

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the `/web/` route in `src/

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo

CVE-2026-75597

### Summary The `/web/` route in `src/pyload/webui/app/blueprints/app_blueprint.py` renders Jinja2 templates without an

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-09 发布INFO

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive Information vulnerability. An unauthe...

CVE-2026-78021

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message C

历史摘要 · 未重新核验 · NVD