CWE-612

11 CVEs classified under CWE-612. Browse by severity and year.

Top CVEs for CWE-612
CVESeverityScorePublishedSummary
CVE-2024-25635High8.82024-02-19alf.io is an open source ticket reservation system. Prior to version 2.0-Mr-2402, organization owners can view the generated API KEY and USERS of other organiz…
CVE-2019-25605High7.52026-03-22EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via…
CVE-2022-35980High7.52022-08-12OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Versions 2.0.0.0 and 2.1.0.0 of the security plugin ar…
CVE-2025-3653High7.32026-01-04Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulnerability that allows unauthorized device manipulation by acce…
CVE-2025-3660Medium6.52026-01-04Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerability that allows authenticated users to access other users'…
CVE-2024-49071Medium6.52024-12-12Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized attacker to disclose…
CVE-2023-4560Medium6.52023-08-28Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4.
CVE-2022-41918Medium6.32022-11-15OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. There is an issue with the implementation of fine-grained access control rules…
CVE-2025-3654Medium5.32026-01-04Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows unauthorized access to device hardware in…
CVE-2025-57756Medium5.32025-08-28Contao is an Open Source CMS. In versions starting from 4.9.14 and prior to 4.13.56, 5.3.38, and 5.6.1, protected content elements that are rendered as fragmen…
CVE-2022-22565Medium4.72022-04-12Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information. An authenticated and privileged user…
All CVEs classified under CWE-612 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2019-25605High7.52026-03-22EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via…
CVE-2025-3660Medium6.52026-01-04Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerability that allows authenticated users to access other users'…
CVE-2025-3654Medium5.32026-01-04Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows unauthorized access to device hardware in…
CVE-2025-3653High7.32026-01-04Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulnerability that allows unauthorized device manipulation by acce…
CVE-2025-57756Medium5.32025-08-28Contao is an Open Source CMS. In versions starting from 4.9.14 and prior to 4.13.56, 5.3.38, and 5.6.1, protected content elements that are rendered as fragmen…
CVE-2024-49071Medium6.52024-12-12Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized attacker to disclose…
CVE-2024-25635High8.82024-02-19alf.io is an open source ticket reservation system. Prior to version 2.0-Mr-2402, organization owners can view the generated API KEY and USERS of other organiz…
CVE-2023-4560Medium6.52023-08-28Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4.
CVE-2022-41918Medium6.32022-11-15OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. There is an issue with the implementation of fine-grained access control rules…
CVE-2022-35980High7.52022-08-12OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Versions 2.0.0.0 and 2.1.0.0 of the security plugin ar…
CVE-2022-22565Medium4.72022-04-12Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information. An authenticated and privileged user…