CWE-540 通过源代码导致的信息暴露 类弱点 26 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-540 指源代码中意外包含敏感信息，属于信息泄露类漏洞。攻击者通过访问服务器或代码仓库，获取脚本源码以分析逻辑、挖掘漏洞或提取登录凭证等关键数据。开发者应避免将源码部署至公开区域，使用版本控制系统时配置忽略规则，并定期审查代码，确保密钥、密码等敏感内容不被硬编码或意外提交，从而降低风险。
<?php $dbName = 'usersDB'; $dbPassword = 'skjdh#67nkjd3$3$'; ?><?php include('database.inc'); $db = connectToDB($dbName, $dbPassword); $db.authenticateUser($username, $password); ?><!-- FIXME: calling this with more than 30 args kills the JDBC server -->| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-4155 | ChargePoint Home Flex 安全漏洞 — Home Flex | 7.5AI | HighAI | 2026-04-11 |
| CVE-2026-35383 | Bentley Systems iTwin Platform 安全漏洞 — iTwin Platform | 6.5 | Medium | 2026-04-02 |
| CVE-2026-22275 | Dell ECS 安全漏洞 — ObjectScale | 4.4 | Medium | 2026-01-23 |
| CVE-2025-36299 | IBM Planning Analytics Local 安全漏洞 — IBM Planning Analytics Local | 4.3 | Medium | 2025-11-17 |
| CVE-2024-38327 | IBM Analytics Content Hub 安全漏洞 — Analytics Content Hub | 6.8 | Medium | 2025-07-10 |
| CVE-2025-49182 | SICK Field Analytics和SICK Media Server 安全漏洞 — SICK Media Server | 7.5 | High | 2025-06-12 |
| CVE-2025-0923 | IBM Cognos Analytics 安全漏洞 — Cognos Analytics | 5.3 | Medium | 2025-06-11 |
| CVE-2025-3403 | Vivotek多款产品 安全漏洞 — NVR ND8422P | 2.7 | Low | 2025-04-08 |
| CVE-2024-55907 | IBM Cognos Analytics Mobile 安全漏洞 — Cognos Analytics Mobile | 2.0 | Low | 2025-03-02 |
| CVE-2024-35144 | IBM Maximo Application Suite 安全漏洞 — Maximo Application Suite | 5.3 | Medium | 2025-01-25 |
| CVE-2024-38647 | QNAP Systems AI Core 安全漏洞 — QNAP AI Core | 9.1 | - | 2024-11-22 |
| CVE-2024-9596 | GitLab Enterprise Edition 安全漏洞 — GitLab | 3.7 | Low | 2024-10-10 |
| CVE-2024-27257 | IBM OpenPages 安全漏洞 — OpenPages | 4.3 | Medium | 2024-09-10 |
| CVE-2024-8417 | Yunke Online School System 安全漏洞 — Yunke Online School System | 3.1 | Low | 2024-09-04 |
| CVE-2024-39729 | IBM Datacap Navigator 安全漏洞 — Datacap Navigator | 4.3 | Medium | 2024-07-15 |
| CVE-2024-1272 | TNB Mobile Solutions Cockpit 安全漏洞 — Cockpit Software | 7.5 | High | 2024-06-05 |
| CVE-2024-2355 | Secret-Coder-PHP-Project 安全漏洞 — Secret-Coder-PHP-Project | 3.7 | Low | 2024-03-10 |
| CVE-2024-2265 | PHP MySQL User Signup Login System 安全漏洞 — PHP-MYSQL-User-Login-System | 5.3 | Medium | 2024-03-07 |
| CVE-2023-35013 | IBM Security Verify Governance 安全漏洞 — Security Verify Governance | 2.3 | Low | 2023-10-15 |
| CVE-2023-30802 | Sangfor Next-Gen Application Firewall 安全漏洞 — Net-Gen Application Firewall | 5.3 | Medium | 2023-10-10 |
| CVE-2023-39250 | Dell Storage Integration Tools for VMware 信息泄露漏洞 — Dell Storage Integration Tools for VMware (DSITV), Dell Storage vSphere Client Plugin (DSVCP), Replay Manager for VMware (RMSV) | 7.8 | High | 2023-08-16 |
| CVE-2023-23448 | SICK FTMg 安全漏洞 — SICK FTMG-ESD15AXX AIR FLOW SENSOR | 5.3 | Medium | 2023-05-15 |
| CVE-2021-34744 | Cisco Business 220 Series Smart Switches 信任管理问题漏洞 — Cisco Small Business 220 Series Smart Plus Switches | 4.9 | Medium | 2021-10-06 |
| CVE-2021-34757 | Cisco Business 220 Series Smart Switches 信任管理问题漏洞 — Cisco Small Business 220 Series Smart Plus Switches | 4.9 | Medium | 2021-10-06 |
| CVE-2021-28805 | QNAP Switch System 信息泄露漏洞 — QSS | 7.8 | High | 2021-06-11 |
| CVE-2021-1516 | Cisco Content Security Management Appliance 安全漏洞 — Cisco Web Security Appliance (WSA) | 4.3 | Medium | 2021-05-06 |
CWE-540（通过源代码导致的信息暴露） 是常见的弱点类别，本平台收录该类弱点关联的 26 条 CVE 漏洞。