CWE-200: Information Disclosure
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Also known as Exposure of Sensitive Information to an Unauthorized Actor, Information Leak.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- birkir primebirkir prime GraphQL Directive graphql information exposure6.9 Medium
- birkir primebirkir prime GraphQL API graphql information disclosure6.9 Medium
- cubewp1211 cubewp frameworkCubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Information Exposure5.3 Medium
- thimpress wp hotel bookingWP Hotel Booking <= 2.2.7 - Unauthenticated Sensitive Information Exposure via 'email' Parameter5.3 Medium
- apple ipados, ios and ipados, iphone os +2 moreA permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3...3.3 Low
- apple ipados, ios and ipados, iphone os +2 moreA permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3...5.3 Medium
- apache airflowApache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated7.5 High
- brechtvds wp recipe makerWP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure4.3 Medium
- chamilo lmsAn issue was discovered in Chamillo LMS 1.11.2. The Social Network /personal_data endpoint...5.5 Medium
- sick incoming goods suiteThe application discloses all used components, versions and license information to...5.3 Medium
- bluspark global bluvoyixPlaintext Passwords Vulnerability in BLUVOYIX10.0 Critical
- bluspark global bluvoyixExposed Internal API Documentation Vulnerability in BLUVOYIX10.0 Critical
- kiwicommerce pdf resume parserPDF Resume Parser <= 1.0 - Unauthenticated Sensitive Information Disclosure in SMTP Credentials5.3 Medium
- lottiefile lottiefilesLottieFiles – Lottie block for Gutenberg <= 3.0.0 - Unauthenticated Sensitive Information Exposure5.3 Medium
- huawei emui, harmonyos +1 morePermission verification bypass vulnerability in the media library module. Impact: Successful...6.2 Medium
- huawei harmonyosPermission control vulnerability in the Notepad module. Impact: Successful exploitation of this...5.1 Medium
- huawei harmonyosPermission control vulnerability in the Notepad module. Impact: Successful exploitation of this...4.7 Medium
- google chromeInsufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an...9.8 Critical
- airth smart home aqi monitor bootloaderAn issue in AIRTH SMART HOME AQI MONITOR Bootloader v.1.005 allows a physically proximate...4.6 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows File Explorer Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows File Explorer Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows File Explorer Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreMicrosoft Windows File Explorer Spoofing Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreTablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreWindows File Explorer Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +29 more +31 moreRemote Procedure Call Information Disclosure Vulnerability6.2 Medium
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreDesktop Window Manager Information Disclosure Vulnerability5.5 Medium
- hewlett packard enterprise (hpe) instant onExposure of VLAN information in unintended network interfaces7.5 High
- fortinet fortifoneAn exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet...9.3 Critical
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morefsnotify: do not generate ACCESS/MODIFY events on child for special files4.8 Medium
- metagauss eventprime – events calendar, bookings and ticketsEventPrime - Events Calendar, Bookings and Tickets <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST API5.3 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the XML component5.3 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking component5.3 Medium
- servicenow now assist ai agents, virtual agent api +1 moreUnauthenticated Privilege Escalation in ServiceNow AI Platform9.3 Critical
- weblate wlcwlc may leak API keys due to an insecure API key configuration5.3 Medium
- openprojectOpenProject is vulnerable to user enumeration via the change password function6.9 Medium
- openprojectOpenProject is Vulnerable to User Enumeration via User ID3.5 Low
- openprojectOpenProject is Vulnerable to Arbitrary File Read via ImageMagick SVG Coder9.1 Critical
- xwiki full calendar macro, xwiki-contrib macro-fullcalendar +1 moreXWiki Full Calendar Macro vulnerable to data leak through Calendar.JSONService5.3 Medium
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +2 more +4 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...2.7 Low
- wedevs wedocs: ai powered knowledge base, docs, documentation, wiki & ai chatbotweDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.1.15 - Unauthenticated Sensitive Information Exposure5.3 Medium
- wpdevteam betterdocs – knowledge base docs & faq solution for elementor & block editorBetterDocs <= 4.3.3 - Authenticated (Contributor+) Sensitive Information Exposure6.5 Medium
shakapackernpmShakapacker has environment variable leak via EnvironmentPlugin that exposes secrets to client-side bundles7.5 High- devolutions remote desktop managerExposure of sensitive information in the TeamViewer entry dashboard component in Devolutions...3.3 Low
- veeam backup and recovery, backup \& replication +1 moreThis vulnerability allows a Backup or Tape Operator to write files as root.9.0 Critical
- kanboardKanboard LDAP Injection Vulnerability can Lead to User Enumeration and Information Disclosure5.3 Medium
- kaysus ks-wr3600 firmwareKAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 mishandle configuration management. Once any...8.8 High
- kaysus ks-wr1200 firmwareKAYSUS KS-WR1200 routers with firmware 107 expose SSH and TELNET services on the LAN interface...5.4 Medium
- cisco secure firewall threat defense (ftd) software, utd snort ips engine software +1 moreCisco Snort DCERPC Stub Data Out of Bounds Read5.3 Medium
- Show moreLoading…