CWE-200: Information Disclosure
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Also known as Exposure of Sensitive Information to an Unauthorized Actor, Information Leak.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Information Exposure (CWE-200)3.7 Low
- auth0 symfonyAuth0 Symfony: Bearer Token Accepted via URL Query Parameter in Auth0 Symfony SDK6.5 Medium
- devolutions serverInsertion of sensitive information into a file in the Recovery Kit response file generation...3.3 Low
- microsoft visual studio codeVisual Studio Code Security Feature Bypass Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWin32k Elevation of Privilege Vulnerability6.2 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 24h2 +10 more +12 moreWin32k Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Secure Channel Information Disclosure Vulnerability5.5 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows Graphics Component Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Kernel Information Disclosure Vulnerability8.2 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows Media Information Disclosure Vulnerability5.3 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Media Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows File Explorer Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows File Explorer Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows File Explorer Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows File Explorer Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Overlay Filter Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Cryptographic Services Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Push Notification Information Disclosure Vulnerability5.5 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWin32k Information Disclosure Vulnerability3.3 Low
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Push Notification Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 24h2 +10 more +12 moreWindows Push Notification Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows Push Notification Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Kernel Information Disclosure Vulnerability3.3 Low
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 24h2 +9 more +11 moreWindows Trusted Runtime Interface Driver Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows DirectX Information Disclosure Vulnerability6.2 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows File Explorer Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Audio Service Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +23 more +25 moreWindows File Explorer Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft visual studio codeGitHub Copilot and Visual Studio Code Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +14 more +16 moreWindows Media Information Disclosure Vulnerability5.5 Medium
- alextselegidis easyappointmentsEasy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure7.1 High
- alextselegidis easyappointmentsEasy!Appointments has unauthenticated customer PII disclosure on booking reschedule page6.9 Medium
- eclipse jettyEclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections6.9 Medium
- eclipse vert.xIn Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler (vertx-core) propagates all request headers as-is across cross-origin HTTP 30x redirec…8.2 High
- nextlevelbuilder goclawnextlevelbuilder GoClaw tool.go handleNavigate information disclosure5.3 Medium
- No product listedAn issue in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to obtain...9.1 Critical
- nextendweb smart slider 3Smart Slider 3 <= 3.5.1.37 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via WP_Query Parameter Injection via 'keyword' Parameter4.3 Medium
- decidimDecidim: Verification documents can be downloaded through reusable links7.5 High
- decidimDecidim: Private exports can be downloaded through reusable links6.5 Medium
- decidimDecidim: Verification admins can access supplied IDs from other organisations4.9 Medium
- No product listedWuzhiCMS Attachment API index.php listimage information disclosure6.9 Medium
- cap-go capgoCapgo - Information Disclosure via Unauthenticated SSO check-domain Endpoint6.9 Medium
- cap-go capgoCapgo - Unauthenticated Information Disclosure via PostgREST global_stats Endpoint8.7 High
- getgrav gravGrav before 2.0.4 Information Disclosure via __GRAV_CONFIG__8.7 High
- mervinpraison praisonaiPraisonAI before 1.6.78 Remote Code Execution via CodeAgent10.0 Critical
- mervinpraison praisonaiPraisonAI before 1.6.78 SSRF via Crawl4AI Chromium backend8.4 High
- mervinpraison praisonaiPraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure Defaults8.8 High
- mervinpraison praisonaiPraisonAI before 4.6.78 Path Traversal via Custom Commands6.8 Medium
- Show moreLoading…