#cwe-523

共收录 9 条相关情报。

← 返回所有主题
漏洞预警2026-10-20 发布INFO

When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request inc...

CVE-2026-113866

When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service ov

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0...

CVE-2026-17620

IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 ...

CVE-2026-17620

IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and compromise secure communicati...

CVE-2026-56587

HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or ma

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. In version 1.9.0, CoreWCF SPNEGO SecurityContextToken negotiation can expose the pr...

CVE-2026-54784

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. In version 1.9.0, CoreWCF

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality

CVE-2026-54784

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. In version 1.9.0, CoreWCF

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-06-19 发布INFO

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to...

CVE-2026-8668

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues.  Q

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-18 发布INFO

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues.  Queue messages contained tenant-specific identifiers.  The...

CVE-2026-8668

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues.  Q

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-03 发布INFO

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 transmits DDNS credentials over plaintext HTTP with only Base64 encoding. The firmware contains no TLS implementation, a...

CVE-2026-36610

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 transmits DDNS credentials over plaintext HTTP with only Base64

历史摘要 · 未重新核验 · NVD