#cwe-497

共收录 117 条相关情报。

← 返回所有主题
漏洞预警2026-10-27 发布INFO

An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the rendered toolbar. Neither response che...

CVE-2026-109823

An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/c

来源摘录 · NVD

安全公告2026-10-27 发布INFO

Host filesystem path disclosure via DNS rebinding

CVE-2026-109823

An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/c

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-20 发布INFO

** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an unauthorized control sphere vulnerability in Apache Cocoon. An unauthenticated user could gain acc...

CVE-2026-108089

** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an unauthorized control sphere vulnerability

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布MEDIUM

Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header. When the response body is a filehandle and the file_etag...

CVE-2026-111946

Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

CVE-2026-96865

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an autho

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.

CVE-2026-85866

Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-83909

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an a

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.

CVE-2026-83907

Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacke

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.

CVE-2026-83905

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacke

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

CVE-2026-83713

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.

CVE-2026-83705

Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized atta

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.

CVE-2026-83672

Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized att

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

CVE-2026-70261

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an auth

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

CVE-2026-70260

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an auth

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

CVE-2026-70055

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an a

来源摘录 · NVD

漏洞预警2026-10-12 发布INFO

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration th...

CVE-2026-78356

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remot

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This ...

CVE-2026-66480

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Produc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in AREOI All Bootstrap Blocks all-bootstrap-blocks allows Retrieve Embedded Sensitive Da...

CVE-2026-62036

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in AREOI All Bootstrap Blocks a

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration...

CVE-2026-107914

Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when deliverin

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/render-ssr-error 2.2.4 and @quasar/app-vite 3.3.0, renderSSRError() in uti...

CVE-2026-106106

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/render-ssr-error

历史摘要 · 未重新核验 · NVD