#cwe-319

共收录 141 条相关情报。

漏洞预警2026-09-26 发布INFO

SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service where session cookies are issued without Secure or SameSite attributes over plaintext...

CVE-2026-100635

SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service where session cookies are is

历史摘要 · 未重新核验 · NVD

#cve #cwe-319

安全公告2026-09-26 发布INFO

SiYuan before v3.8.4 Authentication Bypass via Plaintext Session Cookie

CVE-2026-100635

SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service where session cookies are is

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-319

安全公告2026-09-24 发布INFO

The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and...

CVE-2026-82585

The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connections. An at

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-319 #severity:high

漏洞预警2026-09-23 发布INFO

A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This issue affects the function getProperties of the file ssm_pro/src/main/java/...

CVE-2026-96550

A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This issue affects the

历史摘要 · 未重新核验 · NVD

#cve #cwe-310 #cwe-319

安全公告2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...

CVE-2026-18134

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-319 #severity:high

安全公告2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...

CVE-2026-18176

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-319 #severity:high

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.

CVE-2026-18176

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati

历史摘要 · 未重新核验 · NVD

#cve #cwe-319

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.

CVE-2026-18134

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati

历史摘要 · 未重新核验 · NVD

#cve #cwe-319

漏洞预警2026-09-18 发布INFO

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to...

CVE-2026-86689

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active

历史摘要 · 未重新核验 · NVD

#cve #cwe-319

漏洞预警2026-09-18 发布INFO

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in th...

CVE-2025-36421

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an

历史摘要 · 未重新核验 · NVD

#cve #cwe-319

漏洞预警2026-09-17 发布INFO

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, a reque...

CVE-2026-85720

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT

历史摘要 · 未重新核验 · NVD

#cve #cwe-319 #cwe-522

漏洞预警2026-09-17 发布INFO

mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mport_fetch_index(), mport_fetch_bootstrap_index(), and mport_fetch_bundle() paths in libmport/fetch.c accepted non...

CVE-2026-54586

mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mport_fetch_index(), mport_fetch_bootstrap_index(), and mp

历史摘要 · 未重新核验 · NVD

#cve #cwe-319 #cwe-345

漏洞预警2026-09-17 发布INFO

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and 3.0.12, request...

CVE-2026-85719

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT

历史摘要 · 未重新核验 · NVD

#cve #cwe-319 #cwe-522

漏洞预警2026-09-16 发布INFO

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4...

CVE-2026-85628

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application

历史摘要 · 未重新核验 · NVD

#cve #cwe-319

漏洞预警2026-09-15 发布INFO

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect client middleware strips Authorization and Cookie headers only when a redirect ...

CVE-2026-69212

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect client middleware stri

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-319

漏洞预警2026-09-15 发布INFO

atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowing network man-in-the-middle attackers to rewrite catalog ...

CVE-2026-91988

atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowin

历史摘要 · 未重新核验 · NVD

#cve #cwe-319

安全公告2026-09-10 发布INFO

rclone: http backend forwards custom/auth headers to a different host on redirect

CVE-2026-88013

## Vulnerability Details **File**: `backend/http/http.go` **Lines**: 285 (client construction — no `CheckRedirect`), 50

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-200 #cwe-319 #cwe-522 #severity:low

漏洞预警2026-09-10 发布INFO

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.0 until 1.75.1, the HTTP backend attaches headers configu...

CVE-2026-88013

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-319 #cwe-522

安全公告2026-09-10 发布INFO

rclone: http backend forwards custom/auth headers to a different host on redirect

CVE-2026-88013

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-319 #cwe-522

漏洞预警2026-09-04 发布INFO

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect....

CVE-2026-71216

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over H

历史摘要 · 未重新核验 · NVD

#cve #cwe-319