CWE-212

CWE-212 · 4 records · 0 with a public proof-of-concept

Records the NVD classes under CWE-212, highest CVSS first.

  1. HIGH 7.1CVE-2026-908602026-09-21

    The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session.

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 4.2CVE-2026-734402026-09-16

    On affected platforms running Arista EOS with Simple Network Management Protocol (SNMP) configured, SNMPv3 local or remote user credentials may be exposed as a one-way hashed, localized key value within the device's running and sanitized configurations. An aut…

    AI risk analysis on Exploit-DB.ai →

  3. LOW 3.4CVE-2026-175112026-09-24

    IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-le…

    AI risk analysis on Exploit-DB.ai →

  4. UNSCOREDCVE-2026-968792026-09-25

    Improper removal of sensitive information before storage or transfer vulnerability in Wikimedia Foundation's Mediawiki - FlaggedRevs extension through 1.46.0.

    AI risk analysis on Exploit-DB.ai →