CWE-200: Information Disclosure
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Also known as Exposure of Sensitive Information to an Unauthorized Actor, Information Leak.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- wekanWeKan Meteor Publication cards.js CardPubSubBleed information disclosure5.3 Medium
- google cloud gemini enterprise (formerly agentspace)Information Disclosure via Bucket Squatting in Google Cloud Agentspace.9.1 Critical
- actix actix-filesactix-files before 0.6.10 Information Disclosure via Files6.3 Medium
- smn2gnt mcp salesforce connector, mcp-salesforce +1 moreMCP Salesforce Connector has arbitrary attribute access which leads to disclosure of Salesforce auth token6.6 Medium
- d-link dir-605l, dir-619l, dlink dir-605l firmware +1 more +3 moreD-Link DIR-605L/DIR-619L DHCP Connection Status wan_connection_status.asp information disclosure6.9 Medium
- d-link dir-605l, dir-619l, dlink dir-605l firmware +1 more +3 moreD-Link DIR-605L/DIR-619L DHCP Client Information information disclosure6.9 Medium
- d-link dir-605l, dir-619l, dlink dir-605l firmware +1 more +3 moreD-Link DIR-605L/DIR-619L Wifi Setting information disclosure6.9 Medium
- huawei harmonyosIdentity authentication bypass vulnerability in the window module. Impact: Successful...5.9 Medium
- stackideas easydiscuss, stackideas.com easydiscuss extension for joomla +1 moreExtension - stackideas.com - Information disclosure in post custom fields in EasyDiscuss 1.0.0-5.0.15 for Joomla9.2 Critical
- getgophish gophishGophish is vulnerable to Incorrect Access Control7.6 High
- microsoft azure functionsAzure Function Information Disclosure Vulnerability8.2 High
- openclawOpenClaw Vulnerable to Local File Inclusion via MEDIA: Path Extraction6.5 Medium
- n8nn8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner7.7 High
- f5 big-ip edge client, big-ip access policy manager, big-ip access policy manager client +2 moreBIG-IP Edge Client for Windows vulnerability2.0 Low
- magicimport magic import document extractorMagic Import Document Extractor <= 1.0.6 - Unauthenticated Sensitive Information Exposure5.3 Medium
- chapaet chapa payment gateway plugin for woocommerceChapa Payment Gateway Plugin for WooCommerce <= 1.0.3 - Unauthenticated Sensitive Information Exposure5.3 Medium
- hcl aionHCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability.3.7 Low
- openeclass gunet openeclass, gunet open eclass platform +1 moreGUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure5.3 Medium
- decidimDecidim's private data exports can lead to data leaks8.2 High
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.5 - Authenticated (Subscriber+) Information Disclosure in Coupon Details via 'tutor_coupon_details' AJAX Action5.3 Medium
- akce software technology r&d industry and trade inc. sksproInformation Disclosure in AKCE Software's SKSPro7.5 High
- brainstormforce spectra gutenberg blocks – website builder for the block editorSpectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Data5.3 Medium
- openmage magento, magento-lts +1 moreMagento's X-Original-Url header can expose admin url5.3 Medium
- polarlearnPolarLearn Affected by User Enumeration via Argon2 Timing Attack on Sign-In Endpoint6.3 Medium
- parall jspdfjsPDF has a Shared State Race Condition in addJS Plugin6.3 Medium
- naturalintelligence fast-xml-parserfast-xml-parser has RangeError DoS Numeric Entities Bug7.5 High
- discourseDiscourse allows permalinks to restricted resources to leak resource slugs to unauthorized users6.9 Medium
- litonice13 wp adminify – white label wordpress, admin menu editor, login customizerWP Adminify <= 4.0.7.7 - Unauthenticated Sensitive Information Exposure via 'get-addons-list' REST API5.3 Medium
- mozilla thunderbirdCSS-based exfiltration of the content from partially encrypted emails when allowing remote content4.3 Medium
- open-emr openemrOpenEMR may expose Contents of Clinical Notes and Care Planto users who do not have Sensitivities=high privilege7.1 High
- honoHono has an Arbitrary Key Read in Serve static Middleware (Cloudflare Workers Adapter)6.3 Medium
- ixray-team ixray-1.6-stcop, ix-ray engine 1.6 +1 moreInformation disclosure in ixray-1.6-stcop3.7 Low
- continuous.software aangineAn issue in continuous.software aangine v.2025.2 allows a remote attacker to obtain sensitive...7.5 High
- beetel 777vr1, 777vr1 firmware +1 moreBeetel 777VR1 UART information disclosure1.0 Low
- cubewp1211 cubewp frameworkCubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php4.3 Medium
- wpdirectorykit wp directory kitWP Directory Kit <= 1.4.9 - Unauthenticated Email Exposure via wdk_public_action5.3 Medium
- phpmyfaqphpMyFAQ: Public API endpoints expose emails and invisible questions5.3 Medium
- algo 8180 ip audio alerter, algosolutions 8180 ip audio alerter firmware +1 moreALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability5.3 Medium
- aptsys gemscms backendAn information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the...7.5 High
- microsoft azure data explorerAzure Data Explorer Information Disclosure Vulnerability7.4 High
- gitea, gitea open source git server +1 moreNotification API Leaks Private Repository Issue Titles After Collaborator Permission Revocation6.5 Medium
- typebot, baptistearno typebot.io +1 moreTypebot Vulnerable to Credential Theft via Client-Side Script Execution and API Authorization Bypass7.4 High
- neo4j enterprise editionEnumeration of restricted property value1.3 Low
- atomberg erica smart fan firmwareAn issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to...7.4 High
- oracle life sciences central designerVulnerability in the Oracle Life Sciences Central Designer product of Oracle Health Sciences...5.3 Medium
- oracle corporation agile plm, oracle supply chain products suite +1 moreVulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User...7.5 High
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The...5.3 Medium
- mineadminMineAdmin downloadById information disclosure2.3 Low
- mineadminMineAdmin getFileInfoById information disclosure2.3 Low
- mineadminMineAdmin Swagger information disclosure6.9 Medium
- Show moreLoading…