CWE-200 · Information Disclosure (page 33)
Page 33 of 100 — CVEs classified under CWE-200, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-38301 | Low | 3.4 | 2024-04-22 | An issue was discovered in a third-party component related to vendor.gsm.serial, shipped on devices from multiple device manufacturers. Various software builds… |
CVE-2023-38300 | Medium | 6.2 | 2024-04-22 | A certain software build for the Orbic Maui device (Orbic/RC545L/RC545L:10/ORB545L_V1.4.2_BVZPP/230106:user/release-keys) leaks the IMEI and the ICCID to syste… |
CVE-2023-38296 | High | 8.0 | 2024-04-22 | Various software builds for the following TCL 30Z and TCL A3X devices leak the ICCID to a system property that can be accessed by any local app on the device w… |
CVE-2024-4022 | Medium | 5.3 | 2024-04-21 | A vulnerability was found in Keenetic KN-1010, KN-1410, KN-1711, KN-1810 and KN-1910 up to 4.1.2.15. It has been rated as problematic. Affected by this issue i… |
CVE-2024-4021 | Medium | 5.3 | 2024-04-21 | A vulnerability was found in Keenetic KN-1010, KN-1410, KN-1711, KN-1810 and KN-1910 up to 4.1.2.15. It has been declared as problematic. Affected by this vuln… |
CVE-2024-29961 | High | 8.2 | 2024-04-19 | A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a. It allows a Brocade SANnav service to send ping commands in the background at regular interva… |
CVE-2024-29987 | Medium | 6.5 | 2024-04-18 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
CVE-2024-23557 | Low | 3.5 | 2024-04-18 | HCL Connections contains a user enumeration vulnerability. Certain actions could allow an attacker to determine if the user is valid or not, leading to a possi… |
CVE-2024-31869 | Medium | 4.3 | 2024-04-18 | Airflow versions 2.7.0 through 2.8.4 have a vulnerability that allows an authenticated user to see sensitive provider configuration via the "configuration" UI… |
CVE-2024-3928 | Medium | 4.3 | 2024-04-18 | A vulnerability was found in Dromara open-capacity-platform 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functional… |
CVE-2024-26864 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix refcnt handling in __inet_hash_connect(). syzbot reported a warning in sk_nulls_… |
CVE-2024-32506 | Medium | 5.4 | 2024-04-17 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73. |
CVE-2024-29291 | | 2024-04-16 | An issue in Laravel Framework 8 through 11 might allow a remote attacker to discover database credentials in storage/logs/laravel.log. NOTE: this is disputed b… | |
CVE-2024-21095 | High | 8.2 | 2024-04-16 | Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported ve… |
CVE-2024-21077 | High | 7.5 | 2024-04-16 | Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts LOV). Supported versions that are affected are 12.2.3-… |
CVE-2024-21073 | High | 7.5 | 2024-04-16 | Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected are 12.2.3-12.2.1… |
CVE-2024-21064 | Medium | 5.4 | 2024-04-16 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers). Supported versions that a… |
CVE-2024-21040 | Medium | 6.1 | 2024-04-16 | Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affecte… |
CVE-2024-20991 | Medium | 5.3 | 2024-04-16 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 12.2.1.4.0… |
CVE-2024-20990 | Medium | 5.3 | 2024-04-16 | Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: Templates). Supported versions that are affected are 12.2.3… |
CVE-2024-32086 | High | 7.5 | 2024-04-16 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AitThemes Citadela Listing.This issue affects Citadela Listing: from n/a through 5… |
CVE-2023-50872 | High | 7.5 | 2024-04-16 | The API in Accredible Credential.net December 6th, 2023 allows an Insecure Direct Object Reference attack that discloses partial information about certificates… |
CVE-2024-3574 | High | 7.5 | 2024-04-16 | In scrapy version 2.10.1, an issue was identified where the Authorization header, containing credentials for server authentication, is leaked to a third-party… |
CVE-2024-31219 | Medium | 4.3 | 2024-04-15 | Discourse-reactions is a plugin that allows user to add their reactions to the post. When whispers are enabled on a site via `whispers_allowed_groups` and reac… |
CVE-2024-3780 | High | 7.8 | 2024-04-15 | A vulnerability of Information Exposure has been found on Technicolor CGA2121 affecting the version 1.01, this vulnerability allows a local attacker to obtain… |
CVE-2024-24898 | Medium | 6.0 | 2024-04-15 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is asso… |
CVE-2024-24891 | Medium | 6.0 | 2024-04-15 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in openEuler kernel on Linux allows Resource Leak Exposure. This vulnerability is asso… |
CVE-2024-22435 | High | 8.3 | 2024-04-15 | A potential security vulnerability has been identified in Web ViewPoint Enterprise software. This vulnerability could be exploited to allow unauthorized users… |
CVE-2024-3505 | Medium | 4.3 | 2024-04-15 | JFrog Artifactory Self-Hosted versions below 7.77.3, are vulnerable to sensitive information disclosure whereby a low-privileged authenticated user can read th… |
CVE-2024-29843 | High | 7.5 | 2024-04-15 | The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on MOBILE_GET_USERS_LIST, allowing f… |
CVE-2024-29842 | High | 7.5 | 2024-04-15 | The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_ABACARD_FIE… |
CVE-2024-29841 | High | 7.5 | 2024-04-15 | The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_KEYS_FIELDS… |
CVE-2024-29840 | High | 7.5 | 2024-04-15 | The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS… |
CVE-2024-29839 | High | 7.5 | 2024-04-15 | The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_CARD, allow… |
CVE-2024-29023 | High | 7.2 | 2024-04-12 | Xibo is an Open Source Digital Signage platform with a web content management system and Windows display player software. Session tokens are exposed in the ret… |
CVE-2024-3689 | Low | 3.7 | 2024-04-12 | A vulnerability classified as problematic has been found in Zhejiang Land Zongheng Network Technology O2OA up to 20240403. Affected is an unknown function of t… |
CVE-2024-30381 | High | 8.4 | 2024-04-12 | An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Juniper Networks Paragon Active Assurance Control Center allows a network-adjace… |
CVE-2024-3706 | Medium | 5.9 | 2024-04-12 | Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to view a php backup file (controlacce… |
CVE-2024-29400 | High | 7.5 | 2024-04-12 | An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter. |
CVE-2024-22734 | Medium | 6.2 | 2024-04-12 | An issue was discovered in AMCS Group Trux Waste Management Software before version 7.19.0018.26912, allows local attackers to obtain sensitive information via… |
CVE-2024-2966 | Medium | 5.3 | 2024-04-11 | The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Sensitive Inf… |
CVE-2024-2740 | High | 7.7 | 2024-04-11 | Information exposure vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. This vulnerability could allow a remote attacker to acces… |
CVE-2023-51142 | High | 7.5 | 2024-04-11 | An issue in ZKTeco BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information. |
CVE-2024-31464 | Medium | 6.8 | 2024-04-10 | XWiki Platform is a generic wiki platform. Starting in version 5.0-rc-1 and prior to versions 14.10.19, 15.5.4, and 15.9-rc-1, it is possible to access the has… |
CVE-2024-1643 | Critical | 9.1 | 2024-04-10 | By knowing an organization's ID, an attacker can join the organization without permission and gain the ability to read and modify all data within that organiza… |
CVE-2024-31302 | Medium | 5.3 | 2024-04-10 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This issue affects Contact Form Email: from n/a throu… |
CVE-2024-2974 | Medium | 5.3 | 2024-04-09 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information… |
CVE-2024-2093 | Medium | 6.5 | 2024-04-09 | The VK All in One Expansion Unit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.95.0.1 via social… |
CVE-2023-7046 | High | 7.5 | 2024-04-09 | The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, SSL Score plugin for WordPress is vulnerable to Sensitive Information… |
CVE-2023-6777 | Medium | 5.3 | 2024-04-09 | The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 9.0.34 due… |
CVE-2024-31455 | Medium | 4.3 | 2024-04-09 | Minder by Stacklok is an open source software supply chain security platform. A refactoring in commit `5c381cf` added the ability to get GitHub repositories re… |
CVE-2024-28235 | High | 8.3 | 2024-04-09 | Contao is an open source content management system. Starting in version 4.9.0 and prior to versions 4.13.40 and 5.3.4, when checking for broken links on protec… |
CVE-2024-23662 | Medium | 5.3 | 2024-04-09 | An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 through 7.4.1 and 7.2.0 through 7.2.5 and 7.0… |
CVE-2024-30269 | Medium | 5.3 | 2024-04-08 | DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting… |
CVE-2024-31817 | High | 7.5 | 2024-04-08 | In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getSysStatusCfg. |
CVE-2024-31816 | High | 7.5 | 2024-04-08 | In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getEasyWizardCfg. |
CVE-2024-27897 | High | 7.5 | 2024-04-08 | Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-52341 | High | 7.5 | 2024-04-08 | In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information… |
CVE-2024-2950 | Medium | 5.3 | 2024-04-06 | The BoldGrid Easy SEO – Simple and Effective SEO plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.6.14 via me… |
CVE-2023-5692 | Medium | 5.3 | 2024-04-05 | WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirect_guess_404_permalink function. This can… |
CVE-2024-30263 | High | 7.7 | 2024-04-04 | macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Users with edit rights can access restricted PDF attachments using the PDF Viewer macro… |
CVE-2024-31207 | Medium | 5.9 | 2024-04-04 | Vite (French word for "quick", pronounced /vit/, like "veet") is a frontend build tooling to improve the frontend development experience.`server.fs.deny` does… |
CVE-2024-3262 | Medium | 5.5 | 2024-04-04 | Information exposure vulnerability in RT software affecting version 4.4.1. This vulnerability allows an attacker with local access to the device to retrieve se… |
CVE-2024-3274 | Medium | 5.3 | 2024-04-04 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affecte… |
CVE-2024-30571 | High | 7.5 | 2024-04-03 | An information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication requir… |
CVE-2024-30570 | Medium | 5.3 | 2024-04-03 | An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required. |
CVE-2024-30569 | High | 7.5 | 2024-04-03 | An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required. |
CVE-2023-38729 | Medium | 6.8 | 2024-04-03 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to sensitive information disclosure when using ADMIN_CMD w… |
CVE-2024-2931 | Medium | 4.3 | 2024-04-02 | The WPFront User Role Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.1.11184 via the wpf… |
CVE-2024-3160 | Medium | 5.3 | 2024-04-02 | ** DISPUTED ** A vulnerability, which was classified as problematic, was found in Intelbras MHDX 1004, MHDX 1008, MHDX 1016, MHDX 5016, HDCVI 1008 and HDCVI 10… |
CVE-2024-30469 | Medium | 5.3 | 2024-03-29 | Missing Authorization vulnerability in WPExperts Wholesale For WooCommerce.This issue affects Wholesale For WooCommerce: from n/a through 2.3.0. |
CVE-2023-42936 | Medium | 5.5 | 2024-03-28 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPa… |
CVE-2024-29898 | Medium | 4.9 | 2024-03-28 | CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. An oversight during the writing of the patch for CVE-2024-29897 may have exposed… |
CVE-2024-29897 | Medium | 4.9 | 2024-03-28 | CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. It is possible for users with (delete) or (suppressrevision) on any wiki in the f… |
CVE-2023-52234 | Medium | 6.5 | 2024-03-28 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Elite for WooCommerce.This issue affects Booster Elite for WooComme… |
CVE-2023-52231 | Medium | 6.5 | 2024-03-28 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Plus for WooCommerce.This issue affects Booster Plus for WooCommerc… |
CVE-2024-28247 | High | 7.6 | 2024-03-27 | The Pi-hole is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. A vulnerability has been discovered… |
CVE-2024-25734 | High | 7.5 | 2024-03-27 | An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only after a valid username is entered, which… |
CVE-2024-28442 | High | 7.5 | 2024-03-26 | Directory Traversal vulnerability in Yealink VP59 v.91.15.0.118 allows a physically proximate attacker to obtain sensitive information via terms of use functio… |
CVE-2023-27630 | Medium | 5.3 | 2024-03-26 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PeepSo Community by PeepSo.This issue affects Community by PeepSo: from n/a through… |
CVE-2023-25965 | Medium | 5.9 | 2024-03-26 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in mbbhatti Upload Resume.This issue affects Upload Resume: from n/a through 1.2.0. |
CVE-2024-29197 | Medium | 6.5 | 2024-03-26 | Pimcore is an Open Source Data & Experience Management Platform. Any call with the query argument `?pimcore_preview=true` allows to view unpublished sites. In… |
CVE-2023-50894 | High | 8.8 | 2024-03-26 | In Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function… |
CVE-2024-29883 | Medium | 4.9 | 2024-03-26 | CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. Suppression of wiki requests does not work as intended, and always restricts visi… |
CVE-2024-30233 | Medium | 6.5 | 2024-03-26 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.1. |
CVE-2024-29199 | Low | 3.7 | 2024-03-26 | Nautobot is a Network Source of Truth and Network Automation Platform. A number of Nautobot URL endpoints were found to be improperly accessible to unauthentic… |
CVE-2023-48296 | Medium | 4.3 | 2024-03-25 | OroPlatform is a PHP Business Application Platform (BAP). Navigation history, most viewed and favorite navigation items are returned to storefront user in JSO… |
CVE-2023-45824 | Medium | 4.3 | 2024-03-25 | OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pageId hash. This vuln… |
CVE-2022-32751 | Medium | 5.3 | 2024-03-22 | IBM Security Verify Directory 10.0.0 could disclose sensitive server information that could be used in further attacks against the system. IBM X-Force ID: 22… |
CVE-2024-2728 | Medium | 4.1 | 2024-03-22 | Information exposure vulnerability in the CIGESv2 system. This vulnerability could allow a local attacker to intercept traffic due to the lack of proper implem… |
CVE-2024-2725 | High | 7.5 | 2024-03-22 | Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/installed.json and retrieve all installed… |
CVE-2024-2080 | Medium | 4.3 | 2024-03-22 | The LiquidPoll – Polls, Surveys, NPS and Feedback Reviews plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inclu… |
CVE-2024-27277 | Medium | 6.2 | 2024-03-21 | The private key for the IBM Storage Protect Plus Server 10.1.0 through 10.1.16 certificate can be disclosed, undermining the security of the certificate. IBM… |
CVE-2023-49981 | High | 7.5 | 2024-03-21 | A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without… |
CVE-2024-29036 | Medium | 4.3 | 2024-03-20 | Saleor Storefront is software for building e-commerce experiences. Prior to commit 579241e75a5eb332ccf26e0bcdd54befa33f4783, when any user authenticates in the… |
CVE-2024-27286 | Medium | 6.5 | 2024-03-20 | Zulip is an open-source team collaboration tool. When a user moves a Zulip message, they have the option to move all messages in the topic, move only subsequen… |
CVE-2024-1477 | Medium | 5.3 | 2024-03-20 | The Easy Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2 via the REST API. Th… |
CVE-2024-2632 | High | 7.5 | 2024-03-19 | A Information Exposure Vulnerability has been found on Meta4 HR. This vulnerability allows an attacker to obtain a lot of information about the application suc… |
CVE-2023-40278 | High | 7.5 | 2024-03-19 | An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the printAppointmentPdf.jsp component of Open… |
CVE-2023-40276 | Critical | 9.1 | 2024-03-19 | An issue was discovered in OpenClinic GA 5.247.01. An Unauthenticated File Download vulnerability has been discovered in pharmacy/exportFile.jsp. |