Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
CVE-2026-93474
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
#cwe-522
共收录 306 条相关情报。
← 返回所有主题Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
CVE-2026-93474
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
PictShare before 3.7.1 contains an information disclosure vulnerability that allows...
CVE-2026-104051
PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain
PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the secret delete_code and uploader metadata by calling t...
CVE-2026-104051
PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain
PictShare < 3.7.1 Sensitive Information Disclosure via info API
CVE-2026-104051
PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a credentials leak vulnerability in the Wekan and Baserow username-and-password credentials that sends unencrypted pa...
CVE-2026-103256
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a credentials leak vulnerability in the Wekan and Baserow us
n8n before 2.39.6 and 2.40.x before 2.40.1 Credentials Leak via preAuthentication Hook
CVE-2026-103256
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a credentials leak vulnerability in the Wekan and Baserow us
The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Insufficiently Protected Credentials in all versions up to, and including, 9.3.9 The pl...
CVE-2026-92537
The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Insufficiently Protected Crede
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, two user‑information endpoints can reveal sensitive device and account details under conditions that are not intended for nor...
CVE-2026-100298
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, two user‑information endpoints can reveal sensitive device and accou
Apache Airflow's Snowflake provider did not validate the connection's `account` and `region` fields before interpolating them into request URLs. The SQL API endpoint is built as...
CVE-2026-81930
Apache Airflow's Snowflake provider did not validate the connection's `account` and `region` fields before interpolating
Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile...
CVE-2026-101089
Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the
Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcrypt-hashed password field of authenticated users. Att...
CVE-2026-101089
Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the
Nezha before 2.2.7 Information Disclosure via /api/v1/profile
CVE-2026-101089
Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive...
CVE-2026-81208
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to imp
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker coul...
CVE-2026-81208
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to imp
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to...
CVE-2026-18124
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive informatio
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to...
CVE-2026-17643
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive informatio
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.
CVE-2026-18124
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive informatio
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insufficiently ...
CVE-2026-17643
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive informatio
Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk <2.5.0p15, <2.4.0p37, <2.3.0p51 and 2.2.0 (EOL) allows an authenti...
CVE-2026-92882
Insufficiently protected credentials in the host and folder configuration endpoints of the REST API in Checkmk <2.5.0p15