#cwe-668

共收录 93 条相关情报。

← 返回所有主题
漏洞预警2026-05-11 发布INFO

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Prior to 2.4.0, Namespaced SecretStore resourc...

CVE-2026-42875

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernete

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/ActionEntryPoint.Php, includes/Request/FauxResponse.Php. ...

CVE-2026-34095

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Page/Article.Php. This issue affects MediaWiki: from * before ...

CVE-2026-34094

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Page/Art

历史摘要 · 未重新核验 · NVD

安全公告2026-05-08 发布INFO

Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning

CVE-2026-44552

# Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning ## A

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-08 发布INFO

PraisonAI is a multi-agent teams system. From version 2.5.6 to before version 4.6.34, PraisonAI ships a legacy Flask API server with authentication disabled by default. When tha...

CVE-2026-44338

PraisonAI is a multi-agent teams system. From version 2.5.6 to before version 4.6.34, PraisonAI ships a legacy Flask API

历史摘要 · 未重新核验 · NVD

安全公告2026-05-07 发布INFO

vm2 Host Promise Resolution Preserves Object Identity Across Sandbox Boundary

CVE-2026-44000

### Summary A sandbox boundary violation in **vm2** allows host object identity to cross into the sandbox through host

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq...

CVE-2026-41368

OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq safe-bin policy that fails

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

OpenClaw versions 2026.2.19 before 2026.3.31 contain an improper cache isolation vulnerability in...

CVE-2026-41362

OpenClaw versions 2026.2.19 before 2026.3.31 contain an improper cache isolation vulnerability in the Zalo webhook repla

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec...

CVE-2026-41369

OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec operations, failing to fi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-28 发布INFO

OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec operations, failing to filter package, registry, Docker, compiler, and TLS overrid...

CVE-2026-41369

OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec operations, failing to fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq safe-bin policy that fails to block the $ENV filter. Attackers can bypass safe-bin ...

CVE-2026-41368

OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq safe-bin policy that fails

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-28 发布INFO

OpenClaw versions 2026.2.19 before 2026.3.31 contain an improper cache isolation vulnerability in the Zalo webhook replay-dedupe mechanism that is shared across authenticated we...

CVE-2026-41362

OpenClaw versions 2026.2.19 before 2026.3.31 contain an improper cache isolation vulnerability in the Zalo webhook repla

历史摘要 · 未重新核验 · NVD

漏洞预警2023-07-11 发布HIGH

Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.

CVE-2023-34119

Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated use

来源摘录 · NVD