CWE-359 侵犯隐私 类弱点 139 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-359 指软件未能有效防止未授权主体访问个人私密信息，属于隐私泄露类漏洞。攻击者常利用身份验证缺陷、权限配置错误或接口逻辑漏洞，非法获取敏感数据。开发者应实施严格的访问控制策略，确保仅授权用户可访问数据，同时遵循最小权限原则，并对敏感信息进行加密存储与传输，从而杜绝非授权访问风险。
pass = GetPassword(); ... dbmsLog.WriteLine(id + ":" + pass + ":" + type + ":" + tstamp);<uses-permission android:name="android.permission.ACCESS_FINE_LOCATION"/>locationClient = new LocationClient(this, this, this); locationClient.connect(); Location userCurrLocation; userCurrLocation = locationClient.getLastLocation(); deriveStateFromCoords(userCurrLocation);| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-30056 | Microsoft Edge 安全漏洞 — Microsoft Edge (Chromium-based) | 7.1 | High | 2024-05-25 |
| CVE-2024-29986 | Microsoft Edge 安全漏洞 — Microsoft Edge (Chromium-based) | 5.4 | Medium | 2024-04-18 |
| CVE-2024-29987 | Microsoft Edge 安全漏洞 — Microsoft Edge (Chromium-based) | 6.5 | Medium | 2024-04-18 |
| CVE-2023-6695 | WordPress Plugin Beaver Themer 安全漏洞 — Beaver Themer | 6.5 | Medium | 2024-04-09 |
| CVE-2024-29888 | Saleor 安全漏洞 — saleor | 4.2 | Medium | 2024-03-27 |
| CVE-2023-48680 | Acronis Cyber Protect 信息泄露漏洞 — Acronis Cyber Protect 16 | 7.5 | - | 2024-02-27 |
| CVE-2024-26192 | Microsoft Edge 安全漏洞 — Microsoft Edge (Chromium-based) | 8.2 | High | 2024-02-23 |
| CVE-2023-7014 | WordPress plugin Author Box, Guest Author and Co-Authors for Your Posts 安全漏洞 — Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress | 5.3 | Medium | 2024-02-05 |
| CVE-2023-6630 | WordPress Plugin Contact Form 安全漏洞 — Contact Form 7 – Dynamic Text Extension | 4.3 | Medium | 2024-01-11 |
| CVE-2023-50719 | XWiki Platform 安全漏洞 — xwiki-platform | 7.5 | High | 2023-12-15 |
| CVE-2023-25632 | Naver Whale Browser 安全漏洞 — NAVER Whale browser | 9.1 | - | 2023-11-27 |
| CVE-2023-5983 | Botanik Software Pharmacy Automation 安全漏洞 — Pharmacy Automation | 7.5 | High | 2023-11-22 |
| CVE-2023-36018 | Microsoft Visual Studio Code 安全漏洞 — Jupyter Extension for Visual Studio Code | 7.8 | High | 2023-11-14 |
| CVE-2023-36052 | Microsoft Azure 安全漏洞 — Azure App Service | 8.6 | High | 2023-11-14 |
| CVE-2023-34085 | Ping Identity PingFederate 安全漏洞 — PingFederate | 2.6 | Low | 2023-10-25 |
| CVE-2023-44213 | Acronis Agent 安全漏洞 — Acronis Cyber Protect Cloud Agent | 7.5 | - | 2023-10-05 |
| CVE-2023-44156 | Acronis Cyber Protect 安全漏洞 — Acronis Cyber Protect 15 | 6.5 | - | 2023-09-27 |
| CVE-2023-1936 | GitLab 安全漏洞 — GitLab | 3.5 | Low | 2023-07-11 |
| CVE-2023-35151 | XWiki Platform 安全漏洞 — xwiki-platform | 7.5 | High | 2023-06-23 |
| CVE-2023-28303 | Microsoft Snipping Tool 安全漏洞 — Snipping Tool | 3.3 | Low | 2023-06-13 |
| CVE-2023-2703 | Finex Media Competition Management System 安全漏洞 — Competition Management System | 7.5 | High | 2023-05-23 |
| CVE-2023-22918 | Zyxel ATP 安全漏洞 — ATP series firmware | 6.5 | Medium | 2023-04-24 |
| CVE-2023-2239 | Microweber 安全漏洞 — microweber/microweber | 7.5 | - | 2023-04-22 |
| CVE-2023-29203 | XWiki Commons 安全漏洞 — xwiki-platform | 3.7 | Low | 2023-04-15 |
| CVE-2023-25819 | Discourse 信息泄露漏洞 — discourse | 5.3 | Medium | 2023-03-04 |
| CVE-2023-26041 | Nextcloud 安全漏洞 — security-advisories | 2.6 | Low | 2023-02-27 |
| CVE-2022-46168 | Discourse 安全漏洞 — discourse | 3.5 | Low | 2023-01-05 |
| CVE-2022-41971 | Nextcloud 安全漏洞 — security-advisories | 4.8 | Medium | 2022-12-01 |
| CVE-2022-41936 | XWiki Platform 安全漏洞 — xwiki-platform | 5.3 | Medium | 2022-11-22 |
| CVE-2022-20942 | 多款Cisco产品安全漏洞 — Cisco Secure Web Appliance | 6.5 | Medium | 2022-11-03 |
CWE-359（侵犯隐私） 是常见的弱点类别，本平台收录该类弱点关联的 139 条 CVE 漏洞。