#cwe-522

共收录 306 条相关情报。

← 返回所有主题
漏洞预警2026-09-15 发布INFO

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in mod_vpn_remote/plan.json, pptpd_user_show.cgi, pptp_client_config_show.cgi, and l...

CVE-2026-76871

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in mod_vpn_remote/plan.json

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the user_pass_show.cgi component. Low-privilege attackers can exploit this flaw v...

CVE-2026-76859

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the user_pass_show.cgi c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddns_wan_list_show.cgi endpoint and related DDNSset_cgi, IGD_GetCgiH...

CVE-2026-76857

Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddns_wan_li

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l7_web_auth_user_show.cgi related to captive-portal credential handling. Attacker...

CVE-2026-76854

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l7_web_auth_user_show.cg

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

IBM Verify Identity Access containers may not apply management password change operations correctly.

CVE-2026-11921

IBM Verify Identity Access containers may not apply management password change operations correctly.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Vikunja before 2.6.0 continues to expose the raw TOTP shared secret after enrollment through the GET /api/v1/user/settings/totp and /api/v1/user/settings/totp/qrcode endpoints w...

CVE-2026-91982

Vikunja before 2.6.0 continues to expose the raw TOTP shared secret after enrollment through the GET /api/v1/user/settin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-11 发布INFO

CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality.

CVE-2026-81861

CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information

历史摘要 · 未重新核验 · NVD

安全公告2026-09-10 发布INFO

rclone: http backend forwards custom/auth headers to a different host on redirect

CVE-2026-88013

## Vulnerability Details **File**: `backend/http/http.go` **Lines**: 285 (client construction — no `CheckRedirect`), 50

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-10 发布INFO

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.0 until 1.75.1, the HTTP backend attaches headers configu...

CVE-2026-88013

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.

历史摘要 · 未重新核验 · NVD

安全公告2026-09-10 发布INFO

rclone: http backend forwards custom/auth headers to a different host on redirect

CVE-2026-88013

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-08 发布MEDIUM

Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-64918

Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a netw

来源摘录 · NVD

漏洞预警2026-09-08 发布INFO

A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from c...

CVE-2026-82070

A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privile

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

AVideo through 29.0 contains an information disclosure vulnerability in restreamsActive.json.php that allows authenticated streamers to enumerate source stream keys and identiti...

CVE-2026-86726

AVideo through 29.0 contains an information disclosure vulnerability in restreamsActive.json.php that allows authenticat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configur...

CVE-2026-86600

In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it

历史摘要 · 未重新核验 · NVD

安全公告2026-09-08 发布INFO

Workload identity attestation generated before login host validation in Snowflake drivers

CVE-2026-86600

In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-08 发布INFO

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by s...

CVE-2026-61516

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthentica

历史摘要 · 未重新核验 · NVD

安全公告2026-09-08 发布INFO

AVideo through 29.0 Information Disclosure via restreamsActive.json.php

CVE-2026-86726

AVideo through 29.0 contains an information disclosure vulnerability in restreamsActive.json.php that allows authenticat

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-08 发布INFO

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in...

CVE-2026-76969

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applicatio

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-08 发布INFO

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacke...

CVE-2026-76969

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applicatio

历史摘要 · 未重新核验 · NVD

安全公告2026-09-05 发布INFO

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and...

CVE-2026-86175

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authen

历史摘要 · 未重新核验 · GitHub Advisory