#cwe-209

共收录 131 条相关情报。

← 返回所有主题
漏洞预警2026-09-17 发布INFO

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.CreateSchematic in internal/backend/grpc/schematics.go passes ...

CVE-2026-45723

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.Creat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-17 发布INFO

vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code through error stack formatting. Attacker-supplied code can force the host-realm source t...

CVE-2026-92936

vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code through error stack formatting.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, OAuth2Request::getQueryParams() places app_id, app_secret, refresh_token, and co...

CVE-2026-55375

canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, OAuth2Request::getQuery

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

MCP Memory Keeper is an MCP server for persistent context management in AI coding assistants. Prior to 0.13.0, context_import in src/index.ts passes the caller-controlled filePa...

CVE-2026-54561

MCP Memory Keeper is an MCP server for persistent context management in AI coding assistants. Prior to 0.13.0, context_i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally.

CVE-2026-69294

Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.

CVE-2026-68886

Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67383

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose inf

历史摘要 · 未重新核验 · NVD

安全公告2026-09-04 发布INFO

vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

CVE-2026-73555

## Summary When the vLLM API receives a malformed request (e.g., invalid JSON or missing required fields), FastAPI rais

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-01 发布INFO

An Apache-proxied Dogtag CA REST endpoint exposed by IdM (POST /ca/rest/certrequests) returns HTTP 500 with internal Java stack traces for unauthenticated malformed requests. Th...

CVE-2026-11873

An Apache-proxied Dogtag CA REST endpoint exposed by IdM (POST /ca/rest/certrequests) returns HTTP 500 with internal Jav

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value of a confirmed field to an actor who fails its confirmat...

CVE-2026-82739

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error

CVE-2026-82739

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-01 发布INFO

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker to read internal application data fro...

CVE-2026-82733

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unaut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker to receive unredacted internal error ...

CVE-2026-77950

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unaut

历史摘要 · 未重新核验 · NVD

安全公告2026-09-01 发布INFO

Route handler return value echoed into AshTypescript error response

CVE-2026-82733

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unaut

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-01 发布INFO

RPC error handler fails open in AshTypescript, disclosing unredacted errors

CVE-2026-77950

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unaut

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-31 发布INFO

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_phoenix writes the entire raw submitted param map into an exception message, so sec...

CVE-2026-82727

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_phoenix writes the entire

历史摘要 · 未重新核验 · NVD

安全公告2026-08-31 发布INFO

AshPhoenix Form.Auto leaks submitted params in an unknown _union_type error message

CVE-2026-82727

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_phoenix writes the entire

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-31 发布INFO

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses internal error text to chat users. In AshAi.ToolLoop and AshAi.Tools,...

CVE-2026-82580

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses internal erro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-31 发布INFO

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses provider request state and credentials in a user-facing validation err...

CVE-2026-75760

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses provider requ

历史摘要 · 未重新核验 · NVD

安全公告2026-08-31 发布INFO

AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error

CVE-2026-75760

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses provider requ

历史摘要 · 未重新核验 · OSV.dev