CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,151 vulnerabilities with CWE-200
CVE-2023-1775
MEDIUM
Mattermost Server < 7.1.6 - Unauthorized Sensitive Information Exposure via Websocket Event Broadcast
CVSS 4.3
CVE-2023-1769
MEDIUM
SourceCodester Grade Point Average GPA Calculator 1.0 - Info Disclo...
CVSS 4.3
CVE-2023-1258
MEDIUM
ABB Flow-X Firmware < 4.0 - Unauthenticated Sensitive Information Exposure via Web Service
CVSS 5.3
CVE-2023-28732
MEDIUM
AnyMailing Joomla Plugin <8.3.0 - Info Disclosure
CVSS 6.5
CVE-2023-0836
HIGH
HAProxy 2.1-2.2.26, 2.3-2.4.20, 2.5-2.5.10, 2.6-2.6.7, 2.7 - Information Disclosure
CVSS 7.5
CVE-2023-1680
MEDIUM
Xunrui CMS 4.61 - Info Disclosure
CVSS 4.3
CVE-2023-1683
MEDIUM
Xunrui CMS 4.61 - Info Disclosure
CVSS 4.3
CVE-2023-1681
MEDIUM
Xunrui CMS 4.61 - Info Disclosure
CVSS 4.3
CVE-2023-25722
MEDIUM
Veracode Scan Jenkins Plugin < 23.3.19.0 - Credential Exposure via Process Argument Listing
CVSS 5.5
CVE-2023-1075
LOW
Linux Kernel - Type Confusion in tls_is_tx_ready
CVSS 3.3
CVE-2023-24838
CRITICAL
HGiga PowerStation - Info Disclosure
CVSS 9.8
CVE-2023-28444
CRITICAL
angular-server-side-configuration - Info Disclosure
CVSS 9.9
CVE-2023-21067
HIGH
Android - Exposure of Sensitive Information to an Unauthorized Actor
CVSS 7.5
CVE-2023-28442
HIGH
GeoNode <2.20.6-2.18.7 - Info Disclosure
CVSS 7.5
CVE-2023-28336
MEDIUM
Moodle 3.9.0-3.9.19 and 4.1.0-4.1.1 - Exposure of Sensitive Information via Grade Report History
CVSS 4.3
CVE-2023-28334
MEDIUM
Moodle 4.0.0-4.0.6 and 4.1.0-4.1.1 - Authenticated User Enumeration via Learning Plans Page
CVSS 4.3
CVE-2023-1402
MEDIUM
Moodle - Information Disclosure via Course Participation Report
CVSS 4.3
CVE-2023-20055
HIGH
Cisco DNA Center - Privilege Escalation
CVSS 8.0
CVE-2023-28432
HIGH
KEV
Minio <RELEASE.2023-03-20T20-16-18Z - Info Disclosure
CVSS 7.5
CVE-2023-1562
LOW
Mattermost < 7.5.0 - Exposure of Sensitive Information via Focalboard API
CVSS 3.5
CVE-2023-27591
HIGH
miniflux < 2.0.43 - Unauthenticated Information Disclosure via Prometheus Metrics Endpoint
CVSS 7.5
CVE-2023-0027
MEDIUM
Rockwell Automation Modbus TCP Server AOI <2.04.00 - Info Disclosure
CVSS 5.3
CVE-2023-23622
MEDIUM
Discourse < 3.0.1 and 3.1.0.beta2 - Unauthorized Sensitive Information Exposure via Tag Topic Count
CVSS 4.3
CVE-2023-23935
LOW
Discourse <3.0.1-3.1.0.beta2 - Info Disclosure
CVSS 3.5
CVE-2023-22880
MEDIUM
Zoom Rooms < 5.13.5 - Information Disclosure via Microsoft Edge WebView2 Spellcheck
CVSS 6.8
Details
Vulnerabilities
10,151
Exploit Likelihood
High