CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- mb connect line mbconnect24, mymbconnect24 +1 moreMB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint5.3 Medium
- ibm datapower gateway 10.5.0, datapower gateway 10.6.0, datapower gateway 10.6cd +1 more +3 moreIncorrect administrative access control in IBM DataPower Gateway4.1 Medium
- radiustheme review schemaWordPress Review Schema plugin <= 2.2.6 - Sensitive Data Exposure vulnerability6.5 Medium
- apple ipados, macos, safari +4 more +6 moreAn authorization issue was addressed with improved state management. This issue is fixed in...4.3 Medium
- xtemos woodmartWordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerability5.3 Medium
- radiustheme shopbuilder – elementor woocommerce builder addonsWordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.2.4 - Sensitive Data Exposure vulnerability5.3 Medium
- palo alto networks cortex xdr broker vmCortex XDR Broker VM: Sensitive Information Disclosure Vulnerability5.7 Medium
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 moreUnchecked role in wwwdnload.cgi6.5 Medium
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data is vulnerable to sensitive information leak due to HTTP response6.5 Medium
- qualcomm cologne firmware, fastconnect 6700 firmware, fastconnect 6800 firmware +72 more +74 moreExposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS7.1 High
- n8nn8n has Arbitrary File Read via Python Code Node Sandbox Escape7.1 High
- sap se s/4hana (manage payment media), sap s\/4hana uiapfi70, s\/4hana uis4h +2 moreInformation Disclosure vulnerability in S/4HANA (Manage Payment Media)4.3 Medium
- jeff starr simple ajax chatWordPress Simple Ajax Chat plugin <= 20251121 - Sensitive Data Exposure vulnerability5.3 Medium
- metagauss eventprimeWordPress EventPrime plugin <= 4.2.8.3 - Sensitive Data Exposure vulnerability5.3 Medium
- rtcamp rtmedia for wordpress, buddypress and bbpressWordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability5.3 Medium
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data is vulnerable to sensitive information leaks due to HTTP processing8.1 High
- microcom zeuswebLEAK OF SENSITIVE INFORMATION ON MICROCOM'S ZEUSWEB6.9 Medium
- vadi corporate information systems ltd. co. digikentImproper Access Control in Vadi Corporate Information System's DIGIKENT8.2 High
- yokogawa electric corporation fast/toolsA vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. ...6.9 Medium
- ibm webmethods integration (on prem) - integration serverIBM webMethods Integration Sever is affected by6.5 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service Information Disclosure3.5 Low
- mdedev run contests, raffles, and giveaways with contestswpWordPress Run Contests, Raffles, and Giveaways with ContestsWP plugin <= 2.0.7 - Sensitive Data Exposure vulnerability5.3 Medium
- wpmu dev hustleWordPress Hustle plugin <= 7.8.9.2 - Sensitive Data Exposure vulnerability5.3 Medium
- ibm powervm hypervisorPower System Exposure of Sensitive System Information6.0 Medium
- hclsoftware bigfix complianceHCL BigFix Compliance is vulnerable to a sensitive information disclosure5.3 Medium
- dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 moreTrace Functionality Leaking Sensitive Data in dormakaba access manager8.7 High
- strategy11 team awp classifiedsWordPress AWP Classifieds plugin <= 4.4.3 - Sensitive Data Exposure vulnerability5.3 Medium
- dotstore fraud prevention for woocommerceWordPress Fraud Prevention For Woocommerce plugin <= 2.3.2 - Sensitive Data Exposure vulnerability4.3 Medium
- webpushrWordPress Webpushr plugin <= 4.38.0 - Sensitive Data Exposure vulnerability5.3 Medium
- marcus (aka @msykes) wp fullcalendarWordPress WP FullCalendar plugin <= 1.6 - Sensitive Data Exposure vulnerability5.3 Medium
- posimyth nexter blocksWordPress Nexter Blocks plugin <= 4.6.3 - Sensitive Data Exposure vulnerability4.3 Medium
- themehunk contact form & lead form elementor builderWordPress Contact Form & Lead Form Elementor Builder plugin <= 2.0.1 - Sensitive Data Exposure vulnerability6.5 Medium
- dimitri grassi salon booking systemWordPress Salon booking system plugin <= 10.30.3 - Sensitive Data Exposure vulnerability6.5 Medium
- sizam rehub frameworkWordPress REHub Framework plugin < 19.9.9.4 - Sensitive Data Exposure vulnerability4.3 Medium
- nodejs node, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 moreA flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are...7.1 High
- smartertools smartertrackSmarterTools SmarterTrack 7922 -Information Disclosure6.9 Medium
- sick tdc-x401gl firmware, sick ag tdc-x401gl +1 moreAn attacker with low privileges may be able to read files from specific directories on the device...4.3 Medium
- sap se fiori app (intercompany balance reconciliation)Information Disclosure vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)4.3 Medium
- mozilla firefox, thunderbird +1 moreClickjacking issue, information disclosure in the PDF Viewer component4.3 Medium
- a-plus video technologies ap-bs404, ap-bs408, ap-bs416 +5 more +7 moreA-Plus Video Technologies｜NVR - Sensitive Data Exposure6.9 Medium
- efacec qc 60/90/120INFORMATION DISCLOSURE WITHIN THE OPERATING SYSTEM6.8 Medium
- engotheme plant - gardening & houseplants wordpress themeWordPress Plant - Gardening & Houseplants WordPress Theme <= 1.0.0 - Sensitive Data Exposure Vulnerability5.3 Medium
- pro-bravia sony bravia digital signage, sony bravia signage +1 moreSony BRAVIA Digital Signage 1.7.8 Unauthenticated System API Information Disclosure6.9 Medium
- icewhale casaosCasaOS <= 0.4.15 Unauthenticated File and Debug Data Exposure6.9 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero2.7 Low
- digages direct payments wpWordPress Direct Payments WP plugin <= 1.3.2 - Sensitive Data Exposure vulnerability4.3 Medium
- wp messiah boomdevs wordpress coming soonWordPress BoomDevs WordPress Coming Soon plugin plugin <= 1.0.4 - Sensitive Data Exposure vulnerability4.3 Medium
- nicashmu post video playersWordPress Post Video Players plugin <= 1.163 - Sensitive Data Exposure vulnerability4.3 Medium
- marcelo torres download media libraryWordPress Download Media Library plugin <= 0.2.1 - Sensitive Data Exposure vulnerability5.3 Medium
- roxnor popupkitWordPress PopupKit plugin <= 2.1.5 - Sensitive Data Exposure vulnerability4.3 Medium
- Show moreLoading…