CWE-200: Information Disclosure
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Also known as Exposure of Sensitive Information to an Unauthorized Actor, Information Leak.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- No product listedAn issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain...6.2 Medium
- openpanel-dev openpanelOpenPanel before 3.0.0 Credential Disclosure via notification.rules Query8.4 High
- openpanel-dev openpanelOpenPanel before 3.0.0 Information Disclosure of Ingestion Secret Hashes via client.list5.3 Medium
- totolink a950rgTOTOLINK A950RG global.so getLanguageCfg information disclosure6.9 Medium
- apple macosAn information leakage was addressed with additional validation. This issue is fixed in macOS...6.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreA privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and...5.5 Medium
- apple macosThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden...3.3 Low
- apple macosAn information disclosure issue was addressed with improved logic. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, tvos +2 more +4 moreThis issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2,...3.3 Low
- apple macosAn information disclosure issue was addressed with improved privacy controls. This issue is fixed...3.3 Low
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate...5.5 Medium
- apple macosThe issue was addressed with improved handling of secure input state. This issue is fixed in...6.2 Medium
- apple ipados, macos, tvos +4 more +6 moreAn information disclosure issue was addressed with improved state management. This issue is fixed...3.3 Low
- apple macosThis issue was addressed with improved data protection. This issue is fixed in macOS Golden Gate...4.0 Medium
- apple ipados, macos, visionos +2 more +4 moreThis issue was addressed with improved data access restriction. This issue is fixed in iOS 26.7.2...5.5 Medium
- apple ipados, macos, visionos +2 more +4 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 27.2 and...5.3 Medium
- apple macosA privacy issue was addressed by moving sensitive data. This issue is fixed in macOS Golden Gate...5.5 Medium
- apple macosA privacy issue was addressed with improved memory management. This issue is fixed in macOS...6.2 Medium
- apple ipados, ios and ipados, iphone os +2 moreA privacy issue was addressed by moving sensitive data to a protected location. This issue is...3.3 Low
- mem0ai mem0Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)6.3 Medium
- a2aproject a2a-javaa2aproject a2a-java JSON-RPC Error getMessage information exposure5.3 Medium
- a2aproject a2a-goa2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposure6.9 Medium
- a2aproject a2a-dotneta2aproject a2a-dotnet Parser A2AJsonRpcProcessor.cs A2AJsonRpcProcessor.ProcessRequestAsync information exposure5.3 Medium
- octoprintOctoPrint API Key settings.py getSettings information disclosure6.9 Medium
- No product listedKameleo Local API user-info information disclosure5.3 Medium
- No product listedKameleo Local API profiles information disclosure5.3 Medium
- No product listedKameleo Cookie Controller w.cs CookieController.ListCookies information disclosure5.3 Medium
- No product listedKameleo Profile Controller t.cs ListProfiles information disclosure4.8 Medium
- rt-labs ab soemOut-of-Bounds Read via Unchecked Length Values6.5 Medium
- nocodbNocoDB Sign-in Endpoint AuthService.validateUser information disclosure6.3 Medium
libosmocoreDebianlibosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service...7.5 High- rcloneRclone 1.64.0 before 1.75.2 serve webdav Authentication Bypass via OPTIONS Requests6.9 Medium
- rclonerclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect6.3 Medium
- parse-community parse-serverParse Server 9.0.0 before 9.10.5-alpha.4 LiveQuery Information Disclosure via $or Subscriptions6.0 Medium
- stellarwp givewpGiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Route5.3 Medium
- paolo geodirectoryGeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Action5.3 Medium
- paolo geodirectoryGeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpoint5.3 Medium
- baserproject basercmsbaserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure6.5 Medium
- stape-io gtm-server-side-wordpress-pluginCustomer Order Data Exposed via Unauthenticated gtm_server_side_order_id Cookie Manipulation in GTM Server Side WordPress Plugin8.7 High
- openwrt odhcpdodhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure8.7 High
- unknown otter blocksOtter Blocks < 3.2.8 - Unauthenticated Restricted Block Content Disclosure via REST API5.3 Medium
- unknown otter blocksOtter Blocks 3.1.1 - 3.2.7 - Unauthenticated Non-Public Content Disclosure via REST API5.3 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreLibslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest3.5 Low
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol7.1 High
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing9.3 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-109.6 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-109.8 Critical
- jgraph drawio-desktopdraw.io Desktop: Arbitrary local-file read via read-side IPC (no blessed-path gate)5.6 Medium
- getgrav gravGrav 2.0.0 before 2.2.5 HTTP Basic Credential Disclosure via Twig Uri6.9 Medium
- masscodeio masscodemassCodeIO massCode Local HTTP Service index.ts information disclosure5.3 Medium
- Show moreLoading…