#cwe-522

共收录 306 条相关情报。

漏洞预警2026-08-21 发布INFO

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Fr...

CVE-2026-71862

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-522

漏洞预警2026-08-21 发布INFO

Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD. Prior to 0.10.45, internal/hcl/remote_variables_loader.go and related Terraform Cloud, rem...

CVE-2026-71494

Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD. Prior to 0.10.45, internal/hcl/re

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-08-20 发布INFO

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG embedded cleartext role passwords i...

CVE-2026-55765

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and

历史摘要 · 未重新核验 · NVD

#cve #cwe-256 #cwe-522

漏洞预警2026-08-20 发布INFO

Kerberos Agent is an open source video (surveillance) management agent. Prior to version 3.6.26, the Kerberos Hub upload path sends the agent's Hub credentials in the custom `X-...

CVE-2026-50192

Kerberos Agent is an open source video (surveillance) management agent. Prior to version 3.6.26, the Kerberos Hub upload

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-522

安全公告2026-08-20 发布INFO

Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect

CVE-2026-50192

Kerberos Agent is an open source video (surveillance) management agent. Prior to version 3.6.26, the Kerberos Hub upload

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-522

漏洞预警2026-08-20 发布INFO

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior ...

CVE-2026-53586

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-522 #cwe-601

安全公告2026-08-20 发布INFO

libgit2: HTTP transport can leak credentials to an offsite redirect target

CVE-2026-53586

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-522 #cwe-601

漏洞预警2026-08-19 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. Thi...

CVE-2026-20359

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team ha

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-08-19 发布INFO

On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables.

CVE-2026-8810

On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Pas

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-08-18 发布INFO

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio terminal SSH key authentication in custom_components/blue...

CVE-2026-53456

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-08-18 发布INFO

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio configured Git's credential.helper store when saving Git ...

CVE-2026-53454

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-08-18 发布INFO

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, the Link storage struc...

CVE-2026-62684

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a spec

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-522

漏洞预警2026-08-18 发布INFO

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme i...

CVE-2026-15806

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HT

历史摘要 · 未重新核验 · NVD

#cve #cwe-319 #cwe-522

漏洞预警2026-08-18 发布INFO

The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a malicious 'Token endpoint'. Changes were made to reset the cl...

CVE-2026-23922

The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a mali

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-08-17 发布INFO

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.9.0, the /api/v1/pipeline/handleData endpoint in app/core/src/main/...

CVE-2026-57485

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.9.0, the /

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-522

安全公告2026-08-14 发布INFO

Budibase before 3.40.0 fails to redact datasource credentials stored in STRING typed fields,...

CVE-2026-72857

Budibase before 3.40.0 fails to redact datasource credentials stored in STRING typed fields, allowing authenticated user

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-522 #severity:high

漏洞预警2026-08-13 发布INFO

Budibase before 3.40.0 fails to redact datasource credentials stored in STRING typed fields, allowing authenticated users to read MongoDB connection strings and Firebase private...

CVE-2026-72857

Budibase before 3.40.0 fails to redact datasource credentials stored in STRING typed fields, allowing authenticated user

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

安全公告2026-08-13 发布INFO

Budibase before 3.40.0 Credential Exposure via STRING Fields

CVE-2026-72857

Budibase before 3.40.0 fails to redact datasource credentials stored in STRING typed fields, allowing authenticated user

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-522

漏洞预警2026-08-13 发布INFO

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data.

CVE-2026-0290

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables

历史摘要 · 未重新核验 · NVD

#cve #cwe-522

漏洞预警2026-08-13 发布INFO

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls.

CVE-2026-0289

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user

历史摘要 · 未重新核验 · NVD

#cve #cwe-522