CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,151 vulnerabilities with CWE-200
CVE-2022-43930
MEDIUM
IBM Db2 10.5, 11.1, 11.5 - Sensitive Information Disclosure in Log Files
CVSS 6.2
CVE-2022-41734
MEDIUM
IBM Maximo Asset Management <7.6.1.3 - Info Disclosure
CVSS 5.3
CVE-2022-43927
MEDIUM
IBM Db2 10.5, 11.1, 11.5 - Information Disclosure via Specially Crafted Table Access
CVSS 5.9
CVE-2022-27891
MEDIUM
Palantir Gotham < 3.22.10.4 - Unauthenticated Active Username Enumeration
CVSS 5.3
CVE-2022-45454
HIGH
Acronis Agent < 30161 and Cyber Protect 15 < 30984 - Sensitive Information Disclosure via Insecure Folder Permissions
CVSS 7.5
CVE-2022-47367
MEDIUM
Android - Missing Authorization in Bluetooth Driver
CVSS 5.5
CVE-2022-47329
MEDIUM
Android - Missing Authorization in WLAN Driver
CVSS 5.5
CVE-2022-47328
MEDIUM
Android - Local Information Disclosure via WLAN Driver Missing Permission Check
CVSS 5.5
CVE-2022-47326
MEDIUM
Android - Local Information Disclosure via Missing Permission Check in WLAN Driver
CVSS 5.5
CVE-2022-47325
MEDIUM
Android - Local Information Disclosure via WLAN Driver Missing Permission Check
CVSS 5.5
CVE-2022-47324
MEDIUM
Android - Local Information Disclosure via Missing Permission Check in WLAN Driver
CVSS 5.5
CVE-2022-38686
MEDIUM
Android - Denial of Service in WLAN Driver
CVSS 5.5
CVE-2022-46650
MEDIUM
Acemanager <4.16 - Privilege Escalation
CVSS 4.9
CVE-2022-24410
MEDIUM
Dell Alienware BIOS < 1.15.1 - Unauthenticated Sensitive Information Exposure via Debug Interfaces
CVSS 6.8
CVE-2022-40691
MEDIUM
Moxa SDS-3008 Series < 2.1 - Information Disclosure via Web Application
CVSS 5.3
CVE-2022-44268
MEDIUM
ImageMagick 7.1.0-49 - Info Disclosure
CVSS 6.5
CVE-2022-42439
MEDIUM
IBM App Connect Enterprise Sensitive Information Exposure in Discovery Connector Nodes
CVSS 6.8
CVE-2022-23498
HIGH
Grafana 8.3.1-9.2.9 - Unauthenticated Session Exposure via Datasource Query Cache
CVSS 7.1
CVE-2022-47070
HIGH
nvs-365-v01_firmware - Unauthenticated Exposure of Sensitive Information via Password Validation Response
CVSS 7.5
CVE-2022-4206
MEDIUM
GitLab DAST API Scanner 1.6.50-2.0.101 - Exposure of Sensitive Information via Authorization Header
CVSS 5.0
CVE-2022-32984
HIGH
BTCPay Server <1.5.3 - Info Disclosure
CVSS 7.5
CVE-2022-4054
MEDIUM
GitLab <15.4.6-15.5.5-15.6 - Info Disclosure
CVSS 5.5
CVE-2022-31711
MEDIUM
VMware vRealize Log Insight 3.0-4.8 - Unauthenticated Exposure of Sensitive Session Information
CVSS 5.3
CVE-2022-39193
MEDIUM
MediaWiki CheckUser Extension - Unauthorized Exposure of Sensitive Edit and Action Performer Information
CVSS 5.3
CVE-2022-43959
MEDIUM
1C-Bitrix Bitrix24 <22.200.200 - Info Disclosure
CVSS 4.9
Details
Vulnerabilities
10,151
Exploit Likelihood
High