CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,151 vulnerabilities with CWE-200
CVE-2022-36075
LOW
Nextcloud Files Access Control <1.12.2-1.14.1 - Info Disclosure
CVSS 2.6
CVE-2022-36074
MEDIUM
Nextcloud <24.0.3 - Info Disclosure
CVSS 6.4
CVE-2022-31143
MEDIUM
GLPI < 10.0.3 - Exposure of Sensitive Information via Setup Configuration
CVSS 5.3
CVE-2022-32244
MEDIUM
SAP BusinessObjects Business Intelligence - Authenticated Exposure of Sensitive System Data via Commentary Database
CVSS 5.2
CVE-2022-36101
MEDIUM
Shopware < 5.7.15 - Exposure of Sensitive Information in Backend Customer Detail View
CVSS 5.4
CVE-2022-31221
LOW
Dell BIOS < 1.1.66 - Authenticated Sensitive Information Exposure
CVSS 2.3
CVE-2022-36878
LOW
Samsung Find My Mobile < 7.2.25.14 - Exposure of Sensitive Information via Log
CVSS 3.3
CVE-2022-36877
LOW
Samsung Members < 4.3.00.11 (Global) and < 14.0.02.4 (China) - Sensitive Information Exposure in FaqSymptomCardViewModel
CVSS 2.8
CVE-2022-38400
MEDIUM
Mailform Pro CGI <4.3.1 - Info Disclosure
CVSS 5.9
CVE-2022-36079
HIGH
Parse Server <4.10.14-5.2.5 - Info Disclosure
CVSS 8.6
CVE-2022-34867
HIGH
WP Libre Form 2 2.0.0-2.0.8 - Unauthenticated Sensitive Information Disclosure
CVSS 7.3
CVE-2022-2939
MEDIUM
WP Cerber Security < 9.0 - Unauthenticated User Enumeration via Author Parameter
CVSS 5.3
CVE-2022-2462
MEDIUM
Transposh WordPress Translation <= 1.0.9.6 - Unauthenticated Sensitive Information Disclosure via tp_history AJAX Action
CVSS 5.3
CVE-2022-31176
HIGH
grafana-image-renderer < 3.6.1 - Unauthorized File Disclosure via Fake Datasource
CVSS 8.3
CVE-2022-2806
MEDIUM
ovirt-log-collector/sosreport - Info Disclosure
CVSS 5.5
CVE-2022-2739
MEDIUM
Red Hat Enterprise Linux 7 Extras Podman - Exposure of Sensitive Information via Environment Variables
CVSS 5.3
CVE-2022-1663
MEDIUM
Stop Spam Comments < 0.2.1.2 - Unauthenticated Exposure of Sensitive Information via JavaScript Access Token
CVSS 6.5
CVE-2022-0851
MEDIUM
convert2rhel - Exposure of Sensitive Information via Command Line Argument
CVSS 5.5
CVE-2022-0850
HIGH
Linux Kernel < 4.4.276 - Information Disclosure via ext4_extent_header
CVSS 7.1
CVE-2022-0812
MEDIUM
Linux Kernel < 5.8.0 - Information Disclosure in NFS over RDMA
CVSS 4.3
CVE-2022-32742
MEDIUM
Samba < 4.14.14 - Exposure of Sensitive Information via SMB1 Write Request
CVSS 4.3
CVE-2022-31238
MEDIUM
Dell PowerScale OneFS <9.4.0.2 - Info Disclosure
CVSS 4.7
CVE-2022-34776
MEDIUM
tabit < 3.27.0 - Unauthenticated Exposure of Sensitive Information via Tiny URL Redirect
CVSS 5.5
CVE-2022-2558
MEDIUM
Simple Job Board WP <2.10.0 - Path Traversal
CVSS 5.3
CVE-2022-30693
MEDIUM
Cybozu Office <10.8.5 - Info Disclosure
CVSS 5.3
Details
Vulnerabilities
10,151
Exploit Likelihood
High