CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,151 vulnerabilities with CWE-200
CVE-2023-23500
MEDIUM
iPadOS < 15.7.3 - Unauthorized Sensitive Kernel State Exposure
CVSS 5.5
CVE-2023-23499
MEDIUM
iPadOS < 16.3 - Unauthorized Access to User-Sensitive Data
CVSS 5.5
CVE-2023-27266
LOW
Mattermost 5.12.0-7.6.9 - Authenticated Email Address Exposure via Teams API
CVSS 2.7
CVE-2023-27265
LOW
Mattermost 5.12.0-7.6.9 - Authenticated Email Address Exposure via Regenerate Invite Id API
CVSS 2.7
CVE-2023-0994
HIGH
rosariosis < 10.8.2 - Exposure of Sensitive Information to an Unauthorized Actor
CVSS 7.5
CVE-2023-0597
MEDIUM
Linux Kernel - Memory Leak in CPU Entry Area Mapping
CVSS 5.5
CVE-2023-22476
MEDIUM
MantisBT < 2.25.6 - Authenticated Exposure of Sensitive Information via Group Action Bug Array Parameter
CVSS 4.3
CVE-2023-0901
MEDIUM
pixelfed < 0.11.4 - Exposure of Sensitive Information to an Unauthorized Actor
CVSS 5.3
CVE-2023-22580
MEDIUM
sequelizejs/sequelize - Exposure of Sensitive Information via Improper Input Filtering
CVSS 5.3
CVE-2023-23458
MEDIUM
Sunellsecurity Sn-xvr3804e1 Firmware - Information Disclosure
CVSS 6.5
CVE-2023-0020
HIGH
SAP BusinessObjects Business Intelligence <430 - Info Disclosure
CVSS 8.5
CVE-2023-0814
MEDIUM
Profile Builder < 3.9.0 - Authenticated Sensitive Information Exposure via User Meta Shortcode
CVSS 6.5
CVE-2023-23592
HIGH
WALLIX Access Manager 3.0.0-3.0.16 - Exposure of Sensitive Information
CVSS 7.5
CVE-2023-21435
MEDIUM
Samsung Android - Sensitive Information Exposure in Fingerprint TA via Log
CVSS 4.4
CVE-2023-25165
MEDIUM
Helm 3.0.0-3.11.0 - Exposure of Sensitive Information via getHostByName DNS Lookup
CVSS 4.3
CVE-2023-25164
HIGH
Tinacms 1.0.0-1.0.9 - Exposure of Sensitive Information via Environment Variable Leak
CVSS 8.6
CVE-2023-24827
MEDIUM
Syft v0.69.0-0.69.1 - Info Disclosure
CVSS 6.5
CVE-2023-0659
MEDIUM
BDCOM 1704-WGL 2.0.6314 - Information Disclosure in Backup File Handler
CVSS 5.3
CVE-2023-0658
MEDIUM
Multilaser RE057 and RE170 - Exposure of Sensitive Information via Backup File Handler
CVSS 5.3
CVE-2023-22611
HIGH
EcoStruxure Geo SCADA Expert 2019-2021 - Exposure of Sensitive Information via Database Server TCP Port
CVSS 7.5
CVE-2023-23629
MEDIUM
Metabase < 0.43.7.1 - Improper Privilege Management via Dashboard Subscription
CVSS 6.3
CVE-2023-23628
MEDIUM
Metabase < 0.43.7.1 - Unauthorized Exposure of Dashboard Subscription Recipients
CVSS 5.7
CVE-2023-23624
MEDIUM
Discourse < 3.0.1 - Unauthorized Exposure of Sensitive Information via Exclude Tag Parameter
CVSS 4.3
CVE-2023-23620
MEDIUM
Discourse < 3.0.1 - Unauthorized Access to Restricted Tag Content
CVSS 5.3
CVE-2023-0557
HIGH
ContentStudio <1.2.5 - Info Disclosure
CVSS 7.5
Details
Vulnerabilities
10,151
Exploit Likelihood
High