#cwe-532

共收录 246 条相关情报。

← 返回所有主题
漏洞预警2026-10-02 发布INFO

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to...

CVE-2026-94594

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-02 发布INFO

Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host. Credentials di...

CVE-2026-94593

Armatura One's backup and restore routine records the full database connection command, including the superuser password

历史摘要 · 未重新核验 · NVD

安全公告2026-10-02 发布INFO

The postgresql-operator charm runs a Prometheus postgres_exporter to collect database metrics...

CVE-2026-104055

The postgresql-operator charm runs a Prometheus postgres_exporter to collect database metrics using a dedicated "monitor

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-02 发布INFO

The postgresql-operator charm runs a Prometheus postgres_exporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the ...

CVE-2026-104055

The postgresql-operator charm runs a Prometheus postgres_exporter to collect database metrics using a dedicated "monitor

历史摘要 · 未重新核验 · NVD

安全公告2026-10-02 发布INFO

Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm

CVE-2026-104055

The postgresql-operator charm runs a Prometheus postgres_exporter to collect database metrics using a dedicated "monitor

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-02 发布INFO

OpenTelemetry JavaScript Contrib provides instrumentation libraries for collecting telemetry from JavaScript applications. Prior to versions 0.66.0 of @opentelemetry/instrumenta...

CVE-2026-104872

OpenTelemetry JavaScript Contrib provides instrumentation libraries for collecting telemetry from JavaScript application

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Insertion of sensitive information into log file vulnerability in Apache APISIX. This vulnerability can cause the unmasked header value to be written to the log sink under a ...

CVE-2026-78242

Insertion of sensitive information into log file vulnerability in Apache APISIX. This vulnerability can cause the unm

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Apache Airflow's Teradata provider embedded cloud storage credentials directly into SQL statements. `S3ToTeradataOperator` and `AzureBlobStorageToTeradataOperator` interpolate t...

CVE-2026-81862

Apache Airflow's Teradata provider embedded cloud storage credentials directly into SQL statements. `S3ToTeradataOperato

历史摘要 · 未重新核验 · NVD

安全公告2026-09-27 发布INFO

Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to...

CVE-2025-71425

Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes logs, when the Contr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before...

CVE-2025-71423

Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initialize

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-27 发布INFO

Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes logs, when the Contrast initializer is configured with CONTRAST_LOG_LEVEL set...

CVE-2025-71425

Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes logs, when the Contr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-27 发布INFO

Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initializer logs the full NewMeshCert response — which contains the...

CVE-2025-71423

Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initialize

历史摘要 · 未重新核验 · NVD

安全公告2026-09-25 发布INFO

Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and...

CVE-2026-85417

Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be reco

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before...

CVE-2026-14443

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extensio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

An information exposure vulnerability in the job scheduling component of SANnav allows sensitive...

CVE-2026-14442

An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be writt

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

The Botslab G980H dash camera firmware includes sensitive configuration information, including...

CVE-2026-82716

The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diag

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

Improper handling of sensitive data during IPsec policy creation and modification in Brocade...

CVE-2026-82372

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files...

CVE-2026-82371

Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables individuals wi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-23 发布INFO

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, ?LOG_DEBUG("shutting down Shovel '~ts', ... Shovel state: ~tp", [Name,...

CVE-2026-66068

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, ?LOG_DEBUG("s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent's exec rendering mode could write secrets from env_template to standard output ...

CVE-2026-77285

OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent's exec rendering mode

历史摘要 · 未重新核验 · NVD