#cwe-312

共收录 131 条相关情报。

← 返回所有主题
漏洞预警2026-05-13 发布INFO

When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed TMOS Shell (tmsh) command that may allow a highly privileged authenticated attacker to view sensitive in...

CVE-2026-42408

When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed TMOS Shell (tmsh) command that may allow a high

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

When BIG-IP DNS is provisioned, a vulnerability exists in the gtm_add and bigip_add iControl REST commands that return the ssh-password parameter in cleartext in the iControl RE...

CVE-2026-28758

When BIG-IP DNS is provisioned, a vulnerability exists in the gtm_add and bigip_add iControl REST commands that return t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, every MCP write tool (send_tokens, execute_contract, instantiate_contract, upload_wasm, ibc_...

CVE-2026-43992

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, every MCP write tool (send_tokens,

历史摘要 · 未重新核验 · NVD

安全公告2026-05-12 发布INFO

Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file.

CVE-2026-45362

Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-12 发布INFO

Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file.

CVE-2026-45362

Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-08 发布INFO

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.15, 1.18.9, and 1.19.3, the output of cilium-bugtool can contai...

CVE-2026-41520

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.15, 1.

历史摘要 · 未重新核验 · NVD

安全公告2026-05-08 发布INFO

Electerm's full process.env exposed to renderer via window.pre.env

CVE-2026-43942

### Impact The `getConstants()` IPC handler in `src/app/lib/ipc-sync.js` serialises the entire `process.env` object and

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-08 发布INFO

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, the getConstants() IPC handler in src/app/lib/ipc-sync.js...

CVE-2026-43942

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior,

历史摘要 · 未重新核验 · NVD

安全公告2026-05-05 发布INFO

Prometheus Azure AD remote write OAuth client secret exposed via config API

CVE-2026-42151

### Impact Users who use Azure AD remote write with OAuth authentication are impacted. The `client_secret` field in th

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-04 发布INFO

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth configura...

CVE-2026-42151

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-30 发布INFO

A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) component in the Multicluster Engine (MCE), allows an authenticated user with...

CVE-2026-7163

A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) component in the Mul

历史摘要 · 未重新核验 · NVD