#cwe-532

共收录 246 条相关情报。

← 返回所有主题
安全公告2026-10-11 发布INFO

Predibase LoRAX through 0.12.1 API Token Exposure via Router Logs

CVE-2026-108858

Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-11 发布INFO

Hugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key Logging

CVE-2026-108857

Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configu

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-11 发布INFO

GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger middleware records the raw query string before extractAu...

CVE-2026-108754

GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger

历史摘要 · 未重新核验 · NVD

安全公告2026-10-11 发布INFO

GPT-Load through 1.4.11 Cleartext Proxy Key Logging via Access Logger

CVE-2026-108754

GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-09 发布INFO

Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console pas...

CVE-2026-107783

Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to r

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

Insertion of sensitive information into log file in AWS Tools for PowerShell

CVE-2026-107783

Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to r

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain...

CVE-2026-87980

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cl

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs.

CVE-2026-87980

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cl

历史摘要 · 未重新核验 · NVD

安全公告2026-10-08 发布INFO

An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities...

CVE-2026-87672

An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS v

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote...

CVE-2026-16528

Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-07 发布INFO

Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credentials from the system log, potentially...

CVE-2026-16528

Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by sensitive information exposure in ...

CVE-2026-106504

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose sensitive information in Scaffolder ...

CVE-2026-106502

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose secret-derived values in Scaffolder ...

CVE-2026-106499

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote acc...

CVE-2026-63689

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote acc...

CVE-2026-61411

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File

历史摘要 · 未重新核验 · NVD

安全公告2026-10-05 发布INFO

Snowflake drivers writes sensitive information to logs

CVE-2026-86597

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

Armatura One's message broker logs client connection credentials and the associated password in...

CVE-2026-94594

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

Armatura One's backup and restore routine records the full database connection command, including...

CVE-2026-94593

Armatura One's backup and restore routine records the full database connection command, including the superuser password

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-02 发布INFO

Trigger.dev: Trigger CLI debug deployment logs expose resolved environment secret values

Affected version: trigger.dev 4.5.3 (4.5.6 was advertised by the CLI but was not tested). A staging dry-run executed wi

历史摘要 · 未重新核验 · GitHub Advisory