CWE-215: Insertion of Sensitive Information Into Debugging Code
The product inserts sensitive information into debugging code.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- yeswiki YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameter 6.9 Medium
- webkul aureus erp Webkul Aureus ERP composer.json insertion of sensitive information into debugging code 6.9 Medium
- microsoft trident CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident 8.2 High
- mediatek mt2716 firmware, mt2735 firmware, mt2737 firmware +81 more +83 more In Modem, there is a possible information disclosure due to a logic error. This could lead to... 5.5 Medium
- eummena cadmos lti Cadmos LTI exposure of sensitive information via debug mode 9.2 Critical
- samsung exynos 1330 firmware An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580... 2.8 Low
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 more Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... 5.5 Medium
- siemens reyrolle 7sr5 A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware... 6.9 Medium
- hclsoftware hcl hive HCL Hive is affected by an information exposure vulnerability 4.3 Medium
- siyuan-note siyuan SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosure 9.2 Critical
- suse rancher Exposed tokens in SUSE Rancher AI Agent logs 7.0 High
- dgraph Dgraph: Unauthenticated pprof endpoint leaks admin auth token 9.4 Critical
- linuxfoundation nats-server, red hat multicluster global hub 1.4.5, multicluster global hub 1.6.5 +2 more +4 more NATS credentials are exposed in monitoring port via command-line argv 7.4 High
- metis cyberspace technology sa wic Unauthenticated Data Export and Source Code Disclosure via /dbviewer/ in METIS WIC 7.5 High
- phpgurukul news portal PHPGurukul News Portal settings.py insertion of sensitive information into debugging code 6.3 Medium
-
@actual-app/sync-servernpm Actual Sync-server Gocardless service is logging sensitive data including bearer tokens and account numbers 4.2 Medium - klarna order management for woocommerce WordPress Klarna Order Management for WooCommerce Plugin <= 1.9.8 - Sensitive Data Exposure Vulnerability 6.6 Medium
- contec conprosys hmi system, contec co.,ltd. conprosys hmi system (chs) +1 more CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info 6.9 Medium
- printerlogic vasion print, virtual appliance +1 more Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330... 7.5 High
- ibm cognos analytics mobile IBM Cognos Mobile information disclosure 2.4 Low
- github codeql-action CodeQL GitHub Action failed workflow writes GitHub PAT to debug artifacts 7.1 High
- importify (dropshipping woocommerce), woocommerce dropshipping +1 more WordPress Importify (Dropshipping WooCommerce) plugin <= 1.0.4 - Sensitive Data Exposure vulnerability 5.3 Medium
- ivanti itsm, neurons for itsm +1 more An information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023... 9.6 Critical
- cyber-domain-ontology cdo-utility-local-uuid, lfprojects case python utilities, cdo local uuid utility +2 more cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code 2.2 Low
- aiven journalpump Information Disclosure Vulnerability in Journalpump 6.5 Medium
- samsung quick share, samsung mobile quick share agent +1 more The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18... 4.2 Medium
- microweber, microweber microweber/microweber +1 more Insertion of Sensitive Information Into Debugging Code in microweber/microweber 8.8 High
- kubernetes k8s.gcr.io/defaultbackend, nginx ingress controller +1 more Kubernetes ingress exposes sensitive information 5.3 Medium
- cloud foundry cf cli, cloudfoundry command line interface +1 more CF CLI does not sanitize user's password in verbose/trace/debug 8.2 High
- cloud foundry garden-runc, cloudfoundry cf-deployment, garden-runc-release +2 more Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure... 8.8 High