#cwe-532

共收录 246 条相关情报。

← 返回所有主题
漏洞预警2026-07-16 发布INFO

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fm_reset_password in Tools/ResetPassword.php:48-53 returned a plaintext password and fm_add_exten...

CVE-2026-46514

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fm_reset_password in Tools/ResetPassword

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-16 发布INFO

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DbtMCP.call_tool() in src/dbt_mcp/mcp/server.py logged the raw arguments dictionary at INFO...

CVE-2026-44969

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DbtMCP.call_tool() in src/dbt_mcp/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-16 发布INFO

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended loggi...

CVE-2026-15737

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on t

历史摘要 · 未重新核验 · NVD

安全公告2026-07-16 发布INFO

Frogman: Plaintext passwords and secrets persisted to audit log

CVE-2026-46514

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fm_reset_password in Tools/ResetPassword

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-16 发布INFO

dbt-mcp: Tool Arguments Including SQL Queries and Credentials Logged in Plaintext Without Redaction When File Logging Is Enabled

CVE-2026-44969

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DbtMCP.call_tool() in src/dbt_mcp/

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-16 发布INFO

Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK

CVE-2026-15737

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on t

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-15 发布INFO

Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of Sensitive Information into Log File vulnerability. A low pri...

CVE-2026-40633

Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of Sen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-50316

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

Various sensitive information such as passwords and charging card UIDs are written to log files.

CVE-2026-22098

Various sensitive information such as passwords and charging card UIDs are written to log files.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure.  The application stores potentially sensitive information in log files that could be read by a...

CVE-2026-56459

HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure.  The application stores potentially s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, when Composer is run with -vvv debug verbosity, it could print a credential embedded in the us...

CVE-2026-59947

Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, when Composer is run with -vvv debug

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure)

CVE-2026-59947

Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, when Composer is run with -vvv debug

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-08 发布INFO

Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{service} endpoint allows any authenticated user including the viewer role to download Fri...

CVE-2026-54652

Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{service} endpoint allows any aut

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

Frigate viewer can read logs exposing admin and camera credentials

CVE-2026-54652

Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{service} endpoint allows any aut

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-03 发布INFO

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ...

CVE-2026-46467

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.28.0, the JDBC auto-instrumentation...

CVE-2026-54704

OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. I

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-01 发布INFO

Insertion of Sensitive Information into Log File (CWE-532) in Kibana can lead to information disclosure. When the optional application performance monitoring (APM) instrumentati...

CVE-2026-49088

Insertion of Sensitive Information into Log File (CWE-532) in Kibana can lead to information disclosure. When the option

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 ...

CVE-2026-12086

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 throug

历史摘要 · 未重新核验 · NVD

安全公告2026-06-29 发布INFO

Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed...

CVE-2026-13750

Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed plaintext credentials

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-29 发布INFO

Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed plaintext credentials to be written to persistent local debug logs. An attacker...

CVE-2026-13750

Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed plaintext credentials

历史摘要 · 未重新核验 · NVD