CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor (page 3)
Page 3 of 3 — CVEs classified under CWE-359, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1365 | Medium | 6.5 | 2022-04-15 | Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository lquixada/cross-fetch prior to 3.1.5. |
CVE-2022-24820 | Medium | 5.3 | 2022-04-08 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to view pages of the wi… |
CVE-2022-24819 | Medium | 5.3 | 2022-04-08 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to view pages of the wi… |
CVE-2022-0482 | Critical | 9.1 | 2022-03-09 | Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3. |
CVE-2022-24719 | Low | 2.6 | 2022-03-01 | Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `followRedirects` or `followRedirectsWith` with any of the redirection str… |
CVE-2022-0155 | Medium | 6.5 | 2022-01-10 | follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor |
CVE-2021-36723 | Medium | 6.1 | 2021-12-29 | Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predictable IDs an attacker can scrape all th… |
CVE-2021-3980 | High | 7.5 | 2021-12-03 | elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor |
CVE-2021-28559 | Medium | 5.3 | 2021-09-02 | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Information… |
CVE-2021-21823 | High | 7.5 | 2021-08-20 | An information disclosure vulnerability exists in the Friend finder functionality of GmbH Komoot version 10.26.9 up to 11.1.11. A specially crafted series of n… |
CVE-2021-22876 | Medium | 5.3 | 2021-04-01 | curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP R… |
CVE-2020-1688 | Medium | 6.5 | 2020-10-16 | On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private key that is used to p… |
CVE-2019-15623 | Medium | 5.3 | 2020-02-04 | Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any furthe… |
CVE-2017-16769 | Medium | 5.3 | 2018-02-23 | Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-pro… |