CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,151 vulnerabilities with CWE-200
CVE-2022-20497
MEDIUM
Android - Local Information Disclosure via Lockscreen Notification State Transition
CVSS 4.6
CVE-2022-37930
MEDIUM
HPE Nimble Storage Hybrid Flash Arrays and Secondary Flash Arrays < 5.2.1.900 - Local Sensitive Information Exposure
CVSS 6.7
CVE-2022-37909
MEDIUM
Aruba SD-WAN 8.7.0.0-2.3.0.5 & ArubaOS 6.5.4.0-6.5.4.21 - Sensitive Information Exposure via ESSID
CVSS 5.3
CVE-2022-23497
MEDIUM
FreshRSS 1.18.0-1.20.1 - Unauthenticated Exposure of Sensitive Information via Configuration File Access
CVSS 6.5
CVE-2022-46158
MEDIUM
PrestaShop <1.7.8.8 - Info Disclosure
CVSS 5.3
CVE-2022-23469
LOW
Traefik < 2.9.6 - Sensitive Information Disclosure in Debug Logs
CVSS 3.5
CVE-2022-46825
MEDIUM
JetBrains IntelliJ IDEA <2022.3 - Info Disclosure
CVSS 4.0
CVE-2022-39914
MEDIUM
Android < 13.0 - Unauthorized Sensitive Information Exposure via DisplayManagerService
CVSS 4.0
CVE-2022-39913
MEDIUM
Android < 13.0 - Exposure of Sensitive Information via Persona Manager
CVSS 6.8
CVE-2022-39904
LOW
Google Android - Information Disclosure
CVSS 3.3
CVE-2022-39903
MEDIUM
Android - Exposure of Sensitive Information via RCS Call Access Control
CVSS 4.0
CVE-2022-39897
MEDIUM
Android - Sensitive Information Exposure via Kernel Log
CVSS 4.4
CVE-2022-42782
MEDIUM
Android - Local Information Disclosure via Missing Permission Check in WLAN Driver
CVSS 5.5
CVE-2022-42766
MEDIUM
Android - Missing Authorization in WLAN Driver
CVSS 5.5
CVE-2022-32221
CRITICAL
curl - Exposure of Sensitive Information via Reused Handle Logic
CVSS 9.8
CVE-2022-2827
HIGH
AMI MegaRAC SP-X - Unauthenticated Exposure of Sensitive Information via User Enumeration
CVSS 7.5
CVE-2022-41971
MEDIUM
Nextcloud Talk 12.0.0-12.2.7 - Unauthorized Video Stream Access After Removal
CVSS 4.8
CVE-2022-43901
MEDIUM
IBM WebSphere Automation <1.4.3 - Info Disclosure
CVSS 5.7
CVE-2022-28607
HIGH
ISIC Tour Booking <Feb 13th 2018 - Info Disclosure
CVSS 7.5
CVE-2022-1911
MEDIUM
M-Files Server <22.6.11534.1, <22.6.11505.0 - Info Disclosure
CVSS 5.3
CVE-2022-4228
MEDIUM
Book Store Management System 1.0 - Information Disclosure via User Edit Password Parameter
CVSS 5.3
CVE-2022-46150
MEDIUM
Discourse <2.8.13-2.9.0.beta14 - Info Disclosure
CVSS 4.3
CVE-2022-41944
LOW
Discourse < 2.8.12 - Unauthorized Sensitive Information Exposure via Topic Notifications
CVSS 3.5
CVE-2022-41954
LOW
mpxj < 10.14.1 - Insecure Temporary File Permissions on Unix-like Systems
CVSS 3.3
CVE-2022-41926
LOW
Nextcloud Talk < 14.1.0 - Unauthorized Communication Monitoring via Unprotected Broadcast Receiver
CVSS 3.3
Details
Vulnerabilities
10,151
Exploit Likelihood
High