#cwe-532

共收录 246 条相关情报。

漏洞预警2026-06-29 发布INFO

HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs. This exposure could allow an attacker with access to the logs...

CVE-2026-56457

HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs. This

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

安全公告2026-06-27 发布INFO

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a sensitive data exposure...

CVE-2025-59868

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a sensitive data exposure vulnerability which could allow an

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-532 #severity:medium

漏洞预警2026-06-27 发布MEDIUM

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a sensitive data exposure vulnerability which could allow an attacker to exploit application information to then atte...

CVE-2025-59868

CVE-2025-59868 是 HCL Traveler for Microsoft Outlook (HTMO) 中的一个敏感数据暴露漏洞。该漏洞允许具有本地访问权限的低权限攻击者利用应用程序信息，进而发动其他攻击并导致应用程序出现未知

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-06-26 发布INFO

Mattermost Plugins versions <=11.6 10.18.11 11.3.6 11.6.5.0 fail to sanitize error responses from the OpenAI API before logging, which allows a user with access to server logs o...

CVE-2026-9699

Mattermost Plugins versions <=11.6 10.18.11 11.3.6 11.6.5.0 fail to sanitize error responses from the OpenAI API before

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-06-25 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could hav...

CVE-2026-8330

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.11.6, 19.0 before 19.0.3, and 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-06-25 发布INFO

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.1 that under certain conditions could have allowed a user to access sensitive informatio...

CVE-2026-12053

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.1 that under certain conditions

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-06-23 发布INFO

A flaw was found in foreman-mcp-server. This component utilizes two distinct logging mechanisms that can expose sensitive session and authentication data. One mechanism logs ses...

CVE-2026-9073

A flaw was found in foreman-mcp-server. This component utilizes two distinct logging mechanisms that can expose sensitiv

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-06-23 发布INFO

Module: plugins/modules/nexmo.py CVSS 3.1: 6.5 MEDIUM — AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Issue: api_key and api_secret are declared no_log=True at the input level, but bot...

CVE-2026-11820

Module: plugins/modules/nexmo.py CVSS 3.1: 6.5 MEDIUM — AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Issue: api_key and api_se

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-06-23 发布INFO

Module: plugins/modules/keyring_info.py CVSS 3.1: 5.5 MEDIUM — AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Issue: The module retrieves a passphrase from the OS native keyring (GNOME...

CVE-2026-11819

Module: plugins/modules/keyring_info.py CVSS 3.1: 5.5 MEDIUM — AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Issue: The module

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-06-22 发布MEDIUM

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, the fix for CVE-2026-22778, which introduced a sanitize_message helper that strips ...

CVE-2026-54236

vLLM是一个用于大型语言模型推理和服务的开源引擎。该漏洞（CVE-2026-54236）源于对之前漏洞CVE-2026-22778修复的不完整。之前的修复引入了一个sanitize_message辅助函数，用于在错误消息到达客户端之前去除

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-06-11 发布INFO

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.

CVE-2025-46313

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-06-10 发布INFO

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, o...

CVE-2026-0267

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

安全公告2026-06-10 发布INFO

MongoDB server may log authentication parameters, including credentials, to the server log during...

CVE-2026-9735

MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. W

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-532 #severity:medium

安全公告2026-06-10 发布INFO

The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the...

CVE-2026-9751

The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mon

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-532 #severity:medium

漏洞预警2026-06-09 发布INFO

The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.

CVE-2026-9751

The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mon

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-06-09 发布INFO

MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric logging is enabled, the full...

CVE-2026-9735

MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. W

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-06-08 发布INFO

fabric-chaincode-java is a Java based implementation of Hyperledger Fabric chaincode shim APIs. From version 2.3.1 to before version 2.5.10, when chaincode is deployed in chainc...

CVE-2026-45581

fabric-chaincode-java is a Java based implementation of Hyperledger Fabric chaincode shim APIs. From version 2.3.1 to be

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

安全公告2026-06-02 发布INFO

A high security vulnerability affecting Security Center main server installations has been...

CVE-2026-40619

A high security vulnerability affecting Security Center main server installations has been identified. It could allow an

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-532 #severity:high

漏洞预警2026-06-02 发布INFO

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI exports raw Redis error text as the span status...

CVE-2026-45679

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0

历史摘要 · 未重新核验 · NVD

#cve #cwe-117 #cwe-532

漏洞预警2026-06-02 发布INFO

A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to ...

CVE-2026-40619

A high security vulnerability affecting Security Center main server installations has been identified. It could allow an

历史摘要 · 未重新核验 · NVD

#cve #cwe-532