共收录 131 条相关情报。
← 返回所有主题CVE-2026-4130
There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an
CVE-2026-80058
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains
CVE-2026-80058
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains
CVE-2026-86280
A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This aff
CVE-2026-53603
nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, Operator session tokens ar
CVE-2026-73748
A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privi
CVE-2026-83551
Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Pyt
CVE-2026-83551
Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Pyt
CVE-2026-77975
The affected Ebyte product exports administrative credentials and other sensitive configuration information without a
CVE-2026-82699
A flaw has been found in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This impact
CVE-2026-82640
browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or
CVE-2026-82640
browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or
CVE-2026-82640
browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or
CVE-2026-77970
ash_paper_trail 是 Ash 框架的审计/版本化扩展，用于跟踪资源变更。该漏洞影响 0.3.0 至 0.7.0 之前版本。漏洞源于敏感属性处理不完整：sensitive_attributes 配置中的 :redact 和 :i
CVE-2026-75847
CVE-2026-75847 是 ash-project 开发的 ash_paper_trail 组件中的一个敏感信息明文存储漏洞。该组件用于为 Elixir 的 Ash 框架提供数据版本追踪功能。漏洞成因在于：AshPaperTrail
CVE-2026-81683
openssl_encrypt (pip package openssl-encrypt) versions 1.4.8 and earlier store an mTLS client private key in cleartext w
CVE-2026-81683
openssl_encrypt (pip package openssl-encrypt) versions 1.4.8 and earlier store an mTLS client private key in cleartext w
CVE-2026-59657
Cleartext Storage of Sensitive Information vulnerability in Apache CloudStack with AsyncJob storage in the database. Th
CVE-2026-61798
## Summary `io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringssl` exposes raw HPKE private key bytes i
CVE-2026-76405
In Splunk On-Call (VictorOps) app versions below 1.0.43 on Splunkbase, a user who does not hold the "admin" or "power" S