#cwe-316

共收录 11 条相关情报。

← 返回所有主题
漏洞预警2026-09-04 发布INFO

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobileBundle passes the real *pki.CAResolver directly into mo...

CVE-2026-53604

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobi

历史摘要 · 未重新核验 · NVD

安全公告2026-09-02 发布INFO

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows...

CVE-2026-75137

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recov

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-02 发布INFO

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows...

CVE-2026-75135

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recov

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-02 发布INFO

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover cleartext vault data from process memory even after th...

CVE-2026-75137

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recov

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-02 发布MEDIUM

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by read...

CVE-2026-75135

CVE-2026-75135 是 UpSignOn for Windows 7.19.0 之前版本中存在的一个敏感数据暴露漏洞。该密码管理软件在进程内存中保留了一份备份密钥(backup key),即使用户已重新锁定保险库(vault),本

历史摘要 · 未重新核验 · NVD

安全公告2026-08-21 发布INFO

Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex...

CVE-2026-27875

Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autoca

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-21 发布INFO

Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Em...

CVE-2026-27875

Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autoca

历史摘要 · 未重新核验 · NVD

安全公告2026-07-14 发布INFO

nebula-mesh: CA private key not zeroized on web mobile-bundle error paths

CVE-2026-53604

## Impact The web handler `renderMobileBundle` (`internal/web/handlers.go:1325`) passes the real `*pki.CAResolver` dire

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-22 发布INFO

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an...

CVE-2026-8636

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve use

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-22 发布INFO

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from memory. Attacker ...

CVE-2026-8636

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve use

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Cleartext Storage of Sensitive Information in Memory vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component. This issue affects Meona Client L...

CVE-2026-0857

Cleartext Storage of Sensitive Information in Memory vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo M

历史摘要 · 未重新核验 · NVD