CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- aethonic popticsWordPress Poptics plugin <= 1.0.20 - Sensitive Data Exposure vulnerability4.3 Medium
- o2oe e-invoice app malaysiaWordPress E-Invoice App Malaysia plugin <= 1.3.0 - Sensitive Data Exposure vulnerability5.3 Medium
- ibm aspera faspex 5, aspera faspex +1 moreExposure of Sensitive System Information to an Unauthorized Control Sphere in IBM Aspera Faspex3.1 Low
- giteaGitea inadvertently discloses users' login times by allowing (for example) the lastlogintime explore/users sort order5.3 Medium
- wpxpo postxWordPress PostX plugin <= 5.0.3 - Sensitive Data Exposure vulnerability5.3 Medium
- virusdieWordPress Virusdie plugin <= 1.1.6 - Sensitive Data Exposure vulnerability4.3 Medium
- 10up eight day week print workflowWordPress Eight Day Week Print Workflow plugin <= 1.2.5 - Sensitive Data Exposure vulnerability4.3 Medium
- leap13 premium addons for elementorWordPress Premium Addons for Elementor plugin <= 4.11.53 - Sensitive Data Exposure vulnerability5.3 Medium
- vikas ratudi vpsuformWordPress VPSUForm plugin <= 3.2.24 - Sensitive Data Exposure vulnerability6.5 Medium
- sharp display solutions, ltd. np-cg6500ul, np-cg6500wl, np-cb4500ul, np-cb4500wl, np-p525ulh, np-p525wlh, np-p605ulh, np-p554u, np-p554ug, np-p554u+, np-p554w, np-p554wg, np-p554w+, np-p474u, np-p474ug, np-p474w, np-p474wg, np-p604xg, np-p604x+, np-p603xg, np-p523x+, np-pe523xg, np-pe523x+, np-cf6600u, np-cf6600w, np-cf6700x, np-cf6500x, np-cb4600u, np-p554uh, np-p554wh, np-p474uh, np-p474wh, np-p604xh, np-p603xh, np-pe523xh, np-p502hl-2, np-p502wl-2, np-p502hlg-2, np-p502wlg np-pa653ul, np-pa653ulg, np-pa653ul+, np-pa803ul, np-pa803ulg, np-pa803ul+, np-pa703ul, np-pa703ulg, np-pa703ul+, np-pa733ul+, np-pa803u, np-pa803ug, np-pa803u+, np-pa723ug, np-pa653u, np-pa653ug, np-pa653u+, np-pa853w, np-pa853wg, np-pa853w+, np-pa703wg, np-pa903x, np-pa903xg, np-pa903x+, np-pa753, np-cg6500ul, np-cg6500wl, np-cb4500ul, np-cb4500wl, np-p525ulh, np-p525wlh, np-p605ulh, np-p554u, np-p554ug, np-p554u+, np-p554w, np-p554wg, np-p554w+, np-p474u, np-p474ug, np-p474w, np-p474wg, np-p604xg, np-p604x+, np-p603xg, np-p523x+, np-pe523xg, np-pe523x+, np-cf6600u, np-cf6600w, np-cf6700x, np-cf6500x, np-cb4600u, np-p554uh, np-p554wh, np-p474uh, np-p474wh, np-p604xh, np-p603xh, np-pe523xh, np-p502hl-2, np-p502wl-2, np-p502hlg-2, np-p502wlg np-pa653ul, np-pa653ulg, np-pa653ul+, np-pa803ul, np-pa803ulg, np-pa803ul+, np-pa703ul, np-pa703ulg, np-pa703ul+, np-pa733ul+, np-pa803u, np-pa803ug, np-pa803u+, np-pa723ug, np-pa653u, np-pa653ug, np-pa653u+, np-pa853w, np-pa853wg, np-pa853w+, np-pa703wg, np-pa903x, np-pa903xg, np-pa903x+, np-pa753w+, np-pa653w+, np-pa803x+, np-pa703x+, np-pa803uh, np-pa723uh, np-pa653uh, np-pa853wh, np-pa703wh, np-pa903xh, np-me401w, np-me361w, np-me331w, np-me301w, np-me401x, np-me361x, np-me331x, np-me301x, np-me401wg, np-me361wg, np-me331wg, np-me301wg, np-me401xg, np-me361xg, np-me331xg, np-me301xg np-px1004ul-wh, np-px1004ul-wh+, np-px1004ul-bk, np-px1004ul-bk+, np-ca4155w, np-ca4350x, np-ca4255x, np-ca4155x, np-ca4115x, np-mc331wg, np-mc421xg, np-mc401xg, np-mc371xg, np-mc331xg, np-mc301xg, np-ck4155w, np-ck4255x, np-ck4155x, np-ck4055x, np-cm4150x, np-cm4050x, np-ck4155wg, np-ck4255xg, np-ck4155xg, np-cr2165w, np-cr2305x, np-cr2275x, np-cr2165x, np-cr2155x, np-cd2115x, np-cd2105x, np-cm4151x, np-cr2276x, np-cd2116x, np-pa551u+, np-pa601w+, np-pa651x+, np-px803ul-wh, np-px803ul-bk, np-px803ul-wh+, np-px803ul-bk+, np-p502h, np-p502w, np-p452h, np-p452w, np-p502hg, np-p502wg, np-p452hg, np-p452wg, np-p502h+, np-p502w+, np-cr5450h, np-cr5450w, np-m363w, np-m323w, np-m403x, np-m363x, np-m323x, np-m283x, np-m403wg, np-m363wg, np-m323wg, np-m403xg, np-m363xg, np-m323xg, np-m283xg, np-m403w+, np-m363w+, np-m323w+, np-m403x+, np-m363x+, np-m323x+, np-m283x+, np-m403h, np-m403hg, np-m323hg, np-m403h+, np-m323h+, np-mc370x+, np-mc330x+, np-mc300x+, np-mc330w+, np-mc350xs+, np-mc320xs+, np-mc280xs+, np-mc320ws+, np-cd2100x, np-cd2110x, np-cr2150x, np-cr2160x, np-cr2270x, np-m353ws, np-m333xs, np-m353wsg, np-m303wsg, np-m333xsg, np-m353ws+, np-m303ws+, np-m333xs+, np-m353hs+, np-m323hs+, np-m303hs+, np-ph1202hl, np-ph1202hl+, np-ph1002hl+, np-px602ul-wh, np-px602ul-bk, np-px602wl-wh, np-px6 +5 more +7 moreExposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sharp...9.5 Critical
- happydevs temptool [show current template info]WordPress TempTool [Show Current Template Info] plugin <= 1.3.1 - Sensitive Data Exposure vulnerability4.3 Medium
- kentico xperienceKentico Xperience <= 13.0.159 Authentication Information Disclosure6.9 Medium
- kentico xperienceKentico Xperience <= 12.0.0 User Widget Information Disclosure5.3 Medium
- kentico xperienceKentico Xperience <= 12.0.47 Virtual Context Information Disclosure5.1 Medium
- wedevs wp erpWordPress WP ERP plugin <= 1.16.6 - Sensitive Data Exposure vulnerability6.5 Medium
- getresponse email marketing for wordpress by getresponse officialWordPress Email marketing for WordPress by GetResponse Official plugin <= 1.5.3 - Sensitive Data Exposure vulnerability6.5 Medium
- masteriyo - lmsWordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability6.5 Medium
- wpweb follow my blog postWordPress Follow My Blog Post plugin <= 2.3.9 - Sensitive Data Exposure vulnerability7.5 High
- jetmonsters restaurant menu by motopressWordPress Restaurant Menu by MotoPress plugin <= 2.4.7 - Sensitive Data Exposure vulnerability6.5 Medium
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +116 more +118 moreExposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS6.7 Medium
- world wide broadcast network avideoAVideo < 20.1 System Path Disclosure via Public API6.9 Medium
- sendpulse email marketing newsletterWordPress SendPulse Email Marketing Newsletter plugin <= 2.2.1 - Sensitive Data Exposure vulnerability4.3 Medium
- jheng gao student learning assessment and support systemJHENG GAO｜Student Learning Assessment and Support System - Exposure of Sensitive Information8.7 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1. An app may...5.5 Medium
- apple macosA logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26.1....5.5 Medium
@vitejs/plugin-rscnpmVite Plugin React has a Source Code Exposure Vulnerability in React Server Components5.3 Medium- vercel next.jsNext.js: Unbounded postponed resume buffering can lead to DoS6.9 Medium
- vercel next.jsNext.js: null origin can bypass Server Actions CSRF checks5.3 Medium
- vercel next.jsNext.js: null origin can bypass dev HMR websocket CSRF checks2.3 Low
- vercel next, next.js +1 moreNext.js has Unbounded Memory Consumption via PPR Resume Endpoint5.9 Medium
- vercel next, next.js +1 moreNext.js Vulnerable to Denial of Service with Server Components5.9 Medium
- vercel next.jsNext.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications6.3 Medium
- vercel next.jsNext.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service6.3 Medium
- vercel next.jsNext.js: Unauthenticated Remote Code Execution on windows-hosted servers9.0 Critical
- vercel next.jsNext.js: Response Body Cache Confusion for Requests Containing Bodies6.0 Medium
- vercel next.jsNext.js: Denial of Service in App Router using Server Actions8.2 High
- vercel next.jsNext.js: Cache poisoning via collisions in React Server Component cache-busting3.7 Low
- facebook react, meta react-server-dom-parcel, react-server-dom-turbopack +2 more +4 moreSource Code Exposure Vulnerability in React Server Components5.3 Medium
- zitadelZitadel Discloses the Total Number of Instance Users5.3 Medium
- codename065 download managerWordPress Download Manager plugin <= 3.3.32 - Sensitive Data Exposure vulnerability4.3 Medium
- hiroaki miyashita custom field templateWordPress Custom Field Template plugin <= 2.7.6 - Sensitive Data Exposure vulnerability4.3 Medium
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 2.2.7 - Sensitive Data Exposure vulnerability4.3 Medium
- yuvalo wp google analytics eventsWordPress WP Google Analytics Events plugin <= 2.8.2 - Sensitive Data Exposure vulnerability5.3 Medium
- opicron image cleanupWordPress Image Cleanup plugin <= 1.9.2 - Sensitive Data Exposure vulnerability5.3 Medium
- joel user spam removerWordPress User Spam Remover plugin <= 1.1 - Sensitive Data Exposure vulnerability5.3 Medium
- uixthemes soberWordPress Sober theme <= 3.5.11 - Sensitive Data Exposure vulnerability5.3 Medium
- sizam rehubWordPress Rehub theme <= 19.9.9.1 - Sensitive Data Exposure vulnerability5.3 Medium
- alekv pixel manager for woocommerceWordPress Pixel Manager for WooCommerce plugin <= 1.51.1 - Sensitive Data Exposure vulnerability5.3 Medium
- essential plugin portfolio and projectsWordPress Portfolio and Projects plugin <= 1.5.5 - Sensitive Data Exposure vulnerability4.3 Medium
- primakon project contract managementPrimakon Pi Portal 1.0.18 /api/v2/users endpoint is vulnerable to unauthorized data exposure due...4.3 Medium
- Show moreLoading…