#cwe-532
共收录 246 条相关情报。
← 返回所有主题 漏洞预警2026-10-30 发布INFO
CVE-2026-62347
Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call `S
来源摘录 · NVD
漏洞预警2026-10-30 发布MEDIUM
CVE-2026-119117
Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the li
来源摘录 · NVD / OSV.dev
漏洞预警2026-10-30 发布HIGH
CVE-2026-119290
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core writes rendered repor
来源摘录 · NVD
漏洞预警2026-10-30 发布MEDIUM
CVE-2026-59388
Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentials are exp
来源摘录 · NVD
漏洞预警2026-10-29 发布MEDIUM
CVE-2026-90861
Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear
来源摘录 · NVD
漏洞预警2026-10-28 发布HIGH
CVE-2026-118647
n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's API token in error ex
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-28 发布MEDIUM
CVE-2026-79656
A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC
来源摘录 · NVD
安全公告2026-10-27 发布INFO
CVE-2026-116691
### Summary
`mlflow.crewai.autolog()` leaks CrewAI LLM provider API keys into MLflow trace telemetry.
When a CrewAI `A
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-27 发布MEDIUM
CVE-2026-116691
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 2.
来源摘录 · NVD
漏洞预警2026-10-27 发布INFO
CVE-2026-108328
Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-27 发布INFO
CVE-2026-108325
Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-27 发布INFO
CVE-2026-114409
Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local appl
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-27 发布INFO
CVE-2026-117341
In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. Wh
历史摘要 · 未重新核验 · NVD
安全公告2026-10-27 发布INFO
CVE-2026-116814
OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connection URLs and email tem
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-23 发布INFO
CVE-2026-115885
The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --ver
来源摘录 · NVD
漏洞预警2026-10-23 发布INFO
CVE-2026-54711
pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to versi
来源摘录 · NVD
漏洞预警2026-10-22 发布LOW
CVE-2026-115358
OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive data into
来源摘录 · NVD
安全公告2026-10-22 发布INFO
CVE-2026-16648
Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Sto
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-22 发布INFO
CVE-2026-16648
Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Sto
历史摘要 · 未重新核验 · NVD
安全公告2026-10-22 发布INFO
CVE-2026-16648
Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Sto
历史摘要 · 未重新核验 · OSV.dev