#cwe-532

共收录 246 条相关情报。

漏洞预警2026-10-21 发布MEDIUM

Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0.0 through 2.27.0 expose the correct Slack request HMAC when signature verific...

CVE-2026-113799

Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0.0 through 2.27.0 exp

来源摘录 · NVD

#cve #cwe-532

漏洞预警2026-10-21 发布MEDIUM

Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a local user who can read the server's log, or ...

CVE-2026-114471

Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 through 6.3

来源摘录 · NVD

#cve #cwe-532

安全公告2026-10-21 发布INFO

Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes...

CVE-2026-114073

Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environment secret v

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-532 #severity:medium

漏洞预警2026-10-21 发布INFO

Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environment secret values in debug deployment logs by serializing unredacted ...

CVE-2026-114073

Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environment secret v

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

安全公告2026-10-20 发布INFO

A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure

CVE-2026-111762

### *Impact.** Push notification bearer tokens and authentication credentials submitted by clients are written to server

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-532 #severity:medium

漏洞预警2026-10-20 发布INFO

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody in `transport/rest/src/main/java/org/a2aproject/sdk/...

CVE-2026-111762

A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequest

来源摘录 · NVD

#cve #cwe-532

安全公告2026-10-18 发布INFO

A low-privileged attacker in bluetooth range may be able to access the password of a higher...

CVE-2025-41690

A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user (Maintenance)

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-532 #severity:high

漏洞预警2026-10-14 发布MEDIUM

A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file. The log file is creat...

CVE-2026-109968

A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption pass

来源摘录 · NVD

#cve #cwe-532

漏洞预警2026-10-13 发布MEDIUM

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-85857

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclos

来源摘录 · NVD

#cve #cwe-532

漏洞预警2026-10-13 发布INFO

An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL datab...

CVE-2026-106035

An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a re

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

安全公告2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19...

CVE-2026-101168

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 1

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-532 #severity:medium

漏洞预警2026-10-13 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could h...

CVE-2026-101168

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-10-12 发布INFO

Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variables captured in traceba...

CVE-2023-54407

Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to v

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-10-12 发布INFO

On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnosti...

CVE-2026-85961

On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record s

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-10-12 发布INFO

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive information in diagnostic logs under certain configurations. ...

CVE-2026-85949

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive info

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

安全公告2026-10-11 发布INFO

Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that...

CVE-2026-108858

Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-532 #severity:medium

安全公告2026-10-11 发布INFO

Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability...

CVE-2026-108857

Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configu

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-532 #severity:medium

安全公告2026-10-11 发布INFO

GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys...

CVE-2026-108754

GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-532 #severity:medium

漏洞预警2026-10-11 发布INFO

Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied api_token from POST /generate request bodies into router l...

CVE-2026-108858

Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied a

历史摘要 · 未重新核验 · NVD

#cve #cwe-532

漏洞预警2026-10-11 发布INFO

Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configured api_key because the router's Args struct lacks a reda...

CVE-2026-108857

Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configu

历史摘要 · 未重新核验 · NVD

#cve #cwe-532