#cwe-212

共收录 32 条相关情报。

← 返回所有主题
漏洞预警2026-05-18 发布INFO

FacturaScripts is an open source accounting and invoicing software. In versions prior to 2026, the Library module stores and serves uploaded images byte-for-byte, without stripp...

CVE-2026-27892

FacturaScripts is an open source accounting and invoicing software. In versions prior to 2026, the Library module stores

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-14 发布INFO

OpenBao is an open source identity-based secrets management system. Prior to 2.5.3, when OpenBao's initial namespace deletion fails, subsequent retries fail to properly remove a...

CVE-2026-42186

OpenBao is an open source identity-based secrets management system. Prior to 2.5.3, when OpenBao's initial namespace del

历史摘要 · 未重新核验 · NVD

安全公告2026-05-11 发布INFO

Gryph Agents Payload Filter Fails to Strip Tool Payload for Sensitive Content

CVE-2026-45046

Gryph implements logging levels that determine what content is logged to a local sqlite database. The README incorrectly

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-07 发布INFO

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a missing authorization and da...

CVE-2026-42880

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0

历史摘要 · 未重新核验 · NVD

安全公告2026-05-07 发布INFO

FacturaScripts Vulnerable to Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download

CVE-2026-27892

## Summary **Fectura Scripts** is an open-source ERP application, a **sensitive information disclosure vulnerability**

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-07 发布INFO

A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.

CVE-2024-43384

A low privileged remote attacker can gain the root password due to improper removal of sensitive information before stor

历史摘要 · 未重新核验 · NVD

安全公告2026-05-07 发布INFO

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

CVE-2026-42880

### Summary There is a missing authorization and data-masking gap in Argo CD's ServerSideDiff endpoint that allows an at

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-05 发布INFO

OpenBao's Namespace Deletion May Not Delete Data Properly

CVE-2026-42186

### Impact When OpenBao's initial namespace deletion fails, subsequent retries fail to properly remove all data before

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-05 发布INFO

OpenClaw before 2026.4.14 contains a redaction bypass vulnerability that allows authenticated gateway clients to receive unredacted secrets through sourceConfig and runtimeConfi...

CVE-2026-43528

OpenClaw before 2026.4.14 contains a redaction bypass vulnerability that allows authenticated gateway clients to receive

历史摘要 · 未重新核验 · NVD

安全公告2026-05-02 发布INFO

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext...

CVE-2026-43824

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-02 发布HIGH

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.

CVE-2026-43824

Argo CD 是一个基于 Kubernetes 的声明式 GitOps 持续交付工具。其 ServerSideDiff 功能在版本 3.2.0 至 3.2.10 以及 3.3.0 至 3.3.8 中存在安全漏洞,允许具有较低权限(如只读权

历史摘要 · 未重新核验 · NVD

漏洞预警2012-12-26 发布MEDIUM

OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating ...

CVE-2012-5625

OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not prope

来源摘录 · NVD