CWE-200: Information Disclosure
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Also known as Exposure of Sensitive Information to an Unauthorized Actor, Information Leak.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeInformation leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote...6.5 Medium
- google chromeInformation leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who...3.1 Low
- google chromeInformation leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote...5.3 Medium
- google chromeInformation leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a...6.5 Medium
- google chromeInformation leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...6.5 Medium
- google chromeInformation leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...3.1 Low
- google chromeInformation leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote...5.3 Medium
- google chromeInformation leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote...4.3 Medium
- google chromeInformation leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who...4.3 Medium
- google chromeInformation leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who...3.1 Low
- google chromeInformation leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...4.3 Medium
- mageplaza magefan blogInformation disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 ...7.5 High
- No product listedAn issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service spawns /app/sh_for_telnet7.5 High
- eclipse foundation aeriosIn the current development version of Eclipse aeriOS, for which no official release has yet been...9.9 Critical
- itsourcecode student management systemningzichun Student Management System Backup example.7z information disclosure6.9 Medium
- microsoft visual studio 2022 version 17.14, visual studio 2026 version 18.9, microsoft.diagnostics.runtime +2 more +4 more.NET Elevation of Privilege Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft Account Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +17 more +19 moreWindows Wireless Wide Area Network Service Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreVirtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability7.0 High
- tp link systems inc. oc200 v2, tp-link system inc. omada software controller, tp-link systems inc oc200 v3 +5 more +7 moreUnauthenticated Account Information Disclosure in Multiple Omada Controllers6.9 Medium
- arm ltd 5th gen gpu architecture kernel driver, valhall gpu kernel driver +1 moreMali GPU Kernel Driver allows access to sensitive kernel information7.5 High
- typo3 cmsTYPO3 CMS - Information Disclosure via Backend Localization Wizard5.3 Medium
- code-projects student crud operationcode-projects Student Crud Operation Backup File card_activation.sql information disclosure6.9 Medium
- microsoft .net, .net 10.0 runtime, .net 11.0 runtime +5 more +7 more.NET Elevation of Privilege Vulnerability7.0 High
- light0011 cmslight0011 cms Debug Mode config.php information disclosure6.9 Medium
- mispMISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data2.3 Low
- mispMISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery7.0 High
- mispMISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users2.3 Low
- mispMISP Dashboard Template REST API Exposes Template Owner Email Addresses to Unauthorized Users5.3 Medium
- code-projects hospital information systemcode-projects Hospital Information System SQL Database Backup File his.sql information disclosure6.9 Medium
- jaychouchannel tourism-management-systemjaychouchannel Tourism-Management-System CommonController.java getOption information disclosure6.9 Medium
- code-projects hotel and tourism reservation in phpcode-projects Hotel and Tourism Reservation in PHP Database Backup hotel_db%20(1).sql information disclosure6.9 Medium
- code-projects daily expense manager, daily expense manager expense manager +1 morecode-projects Daily Expense Manager Database Backup exp_ak.sql information disclosure6.9 Medium
- wwbn avideoWWBN AVideo Broken Access Control via videoViewsInfo hash Parameter9.3 Critical
local-operatorPyPIArbitrary file read via workspace confinement bypass in local-operator /v1/chat/agents/{id}/edit7.5 High- unknown embedpressEmbedPress 4.6.0 - 4.6.3 - Contributor+ Administrator Email Disclosure via Google Reviews REST Route2.7 Low
- stellarwp the events calendarThe Events Calendar < 6.17.3.1 - Contributor+ Non-Public Event, Venue and Organizer Content Disclosure via REST API2.7 Low
- unknown my private siteMy Private Site < 4.2.3 - Unauthenticated Sensitive Information Exposure via RSS Feeds and Sitemap3.7 Low
- unknown smart postPost Carousel 4.0.0 - 4.0.7 - Unauthenticated Password-Protected Post Content and post_password Disclosure via sp_handle_post_id5.3 Medium
- jetmonsters jetformbuilder — dynamic blocks form builderJetFormBuilder < 3.6.5.2 - Unauthenticated Password Hash and Arbitrary Metadata Disclosure via Dynamic Preset7.5 High
- ibm contextforge, contextforge mcp gateway +1 moreIBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution8.8 High
- ibm iIBM i is Affected By Sensitive Information Exposure Vulnerability in PASE []6.5 Medium
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flows7.5 High
- code-projects vehicle management systemcode-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure6.9 Medium
- thorsten phpmyfaqphpMyFAQ before 4.1.8 TOTP Secret Exposure via Data Export5.3 Medium
- apache software foundation alluraApache Allura: Information exposure via search7.5 High
- unknown xpro addons — 140+ widgets for elementor, xpro addons — 140+ widgets for elementor +1 moreXpro Elementor Addons < 1.7.8 - Unauthenticated Draft/Private Product Disclosure via Quick View5.3 Medium
- unknown wpfunnelsWPFunnels < 3.13.0 - Unauthenticated Order and Opt-In PII Disclosure via Web-Accessible Log Files5.3 Medium
- unknown content viewsContent Views < 4.5.1.2 - Unauthenticated Non-Public Post Content Disclosure via Views Status Filter5.3 Medium
- No product listedAn information disclosure vulnerability in the ugw-deviceinfo method of /cgi-bin/wwwugw.cgi in...6.5 Medium
- Show moreLoading…