#cwe-256
共收录 35 条相关情报。
← 返回所有主题 漏洞预警2026-07-16 发布INFO
CVE-2026-46513
Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by T
历史摘要 · 未重新核验 · NVD
安全公告2026-07-16 发布INFO
CVE-2026-46513
Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by T
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-07-07 发布INFO
CVE-2026-14867
Credentials of built-in users are insecurely stored in the User directory of PcVue projects, all versions prior to 17.0.
历史摘要 · 未重新核验 · NVD
安全公告2026-07-02 发布INFO
CVE-2026-50268
### Summary
Configuring `encrypt:rsa:algorithm=OAEP` does not enable OAEP encryption. Due to an incorrect BouncyCastle
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-25 发布INFO
CVE-2026-55164
## Summary
`lemur.users.service.update()` writes a user's new password as plaintext to the `users.password` column. The
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-24 发布INFO
CVE-2026-57302
Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller,
历史摘要 · 未重新核验 · NVD
安全公告2026-06-22 发布INFO
CVE-2026-46488
### Summary
An authentication bypass vulnerability exists due to improper trust in client-controlled cookies. The applic
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-17 发布INFO
CVE-2026-50268
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applicati
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-16 发布INFO
CVE-2024-39575
update_disk_psu_baseline.sh requires password in plain text
历史摘要 · 未重新核验 · NVD
安全公告2026-06-11 发布INFO
CVE-2024-45636
IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileg
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-11 发布INFO
CVE-2024-45636
IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileg
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-29 发布INFO
CVE-2018-25396
Heatmiser Wifi Thermostat 1.7 contains a credential disclosure vulnerability that allows unauthenticated attackers to re
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-04 发布INFO
CVE-2026-6500
Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data.
历史摘要 · 未重新核验 · NVD
安全公告2026-05-01 发布INFO
CVE-2025-36335
IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a lo
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-04-30 发布INFO
CVE-2025-36335
IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a lo
历史摘要 · 未重新核验 · NVD