#cwe-532

共收录 246 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布INFO

Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call `SPA` logs the `password` URL query parameter. When a user ...

CVE-2026-62347

Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call `S

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might al...

CVE-2026-119117

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the li

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布HIGH

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core writes rendered reportSummary(...) notes to GITHUB_STEP_SUMMARY through writeJ...

CVE-2026-119290

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core writes rendered repor

来源摘录 · NVD

漏洞预警2026-10-30 发布MEDIUM

Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentials are exposed in audit events for app manifest application, creati...

CVE-2026-59388

Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentials are exp

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear text to another administrator, who could use it to gain ...

CVE-2026-90861

Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's API token in error execution data, because failed poll requests store raw requ...

CVE-2026-118647

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's API token in error ex

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-28 发布MEDIUM

A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC access, refresh and ID tokens of users who sign in throug...

CVE-2026-79656

A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC

来源摘录 · NVD

安全公告2026-10-27 发布INFO

MLflow CrewAI autologging records LLM provider API keys in logged trace spans

CVE-2026-116691

### Summary `mlflow.crewai.autolog()` leaks CrewAI LLM provider API keys into MLflow trace telemetry. When a CrewAI `A

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-27 发布MEDIUM

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 2.19.0 until 3.17.0, mlflow.crewai.autolog() records CrewAI...

CVE-2026-116691

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 2.

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.

CVE-2026-108328

Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

CVE-2026-108325

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application logs and diagnostics bundles due to insufficient ...

CVE-2026-114409

Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local appl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布INFO

In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. When the invitation is linked to a space, a user in that sp...

CVE-2026-117341

In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. Wh

历史摘要 · 未重新核验 · NVD

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database...

CVE-2026-116814

OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connection URLs and email tem

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-23 发布INFO

The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push token on standard i...

CVE-2026-115885

The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --ver

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection informa...

CVE-2026-54711

pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to versi

来源摘录 · NVD

漏洞预警2026-10-22 发布LOW

OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive data into audit logs by sending malformed plugin parameters. Attack...

CVE-2026-115358

OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive data into

来源摘录 · NVD

安全公告2026-10-22 发布INFO

Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows...

CVE-2026-16648

Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Sto

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-22 发布INFO

Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Stolen Credentials. This issue affects Mailer Plus Log versi...

CVE-2026-16648

Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Sto

历史摘要 · 未重新核验 · NVD

安全公告2026-10-22 发布INFO

Mailer Plus Log - Moderately critical - Access bypass - SA-CONTRIB-2026-128

CVE-2026-16648

Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Sto

历史摘要 · 未重新核验 · OSV.dev