#cwe-497

共收录 117 条相关情报。

← 返回所有主题
漏洞预警2026-06-12 发布INFO

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HashThemes Hash Elements allows Retrieve Embedded Sensitive Data. This issue affects...

CVE-2026-24618

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HashThemes Hash Elements all

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of se...

CVE-2026-0466

Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memor

历史摘要 · 未重新核验 · NVD

安全公告2026-06-09 发布INFO

Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP...

CVE-2026-44743

Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP Business Objects application l

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-09 发布LOW

Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP Business Objects application leaks sensitive information .This has a low impact on the ...

CVE-2026-44743

该漏洞存在于SAP Business Objects应用程序中。当未经授权的攻击者访问特定端点时,在特定条件下,应用程序会泄露敏感信息。根据NVD的描述,漏洞仅对数据的机密性有低度影响,不涉及完整性和可用性。漏洞的CVSS评分为3.7(低危

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts (e.g., regex patterns) and revealing underlying UR...

CVE-2026-44749

The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request art

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects...

CVE-2026-27349

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint all

历史摘要 · 未重新核验 · NVD

安全公告2026-05-13 发布INFO

An information disclosure vulnerability in Trust Protection Foundation enables an authenticated...

CVE-2026-0240

An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-13 发布INFO

An information disclosure vulnerability in the Chronosphere Chronocollector enables an...

CVE-2026-0239

An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with net

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-13 发布INFO

An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful expl...

CVE-2026-0240

An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with network access to the collector service to retrieve sensitiv...

CVE-2026-0239

An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with net

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-08 发布INFO

SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obt...

CVE-2026-7864

SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endp

历史摘要 · 未重新核验 · NVD

安全公告2026-05-08 发布INFO

Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that...

CVE-2026-41928

Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that allows unauthenticated

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-07 发布INFO

Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that allows unauthenticated attackers to retrieve the application's secret cron key....

CVE-2026-41928

Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that allows unauthenticated

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-07 发布INFO

Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulner...

CVE-2026-42047

Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orche

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-07 发布INFO

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data. This issu...

CVE-2026-25468

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elem

历史摘要 · 未重新核验 · NVD

安全公告2026-04-29 发布INFO

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...

CVE-2026-42644

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs bette

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-29 发布INFO

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs betterdocs allows Retrieve Embedded Sensitive Data.This issue ...

CVE-2026-42644

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs bette

历史摘要 · 未重新核验 · NVD