CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,151 vulnerabilities with CWE-200
CVE-2022-35147
CRITICAL
DoraCMS < 2.1.8 - Unauthenticated Login Bypass via Crafted HTTP Request
CVSS 9.8
CVE-2022-37438
LOW
Splunk Enterprise 8.1.0-8.1.10 & Splunk Cloud <8.2.2203.4 Authenticated Info Exposure
CVSS 2.6
CVE-2022-35290
HIGH
SAP Authenticator < 1.2.17 - Exposure of Sensitive Information
CVSS 7.5
CVE-2022-31674
MEDIUM
VMware vRealize Operations 8.0.0-8.6.4 - Information Disclosure via Log File Access
CVSS 4.3
CVE-2022-35715
HIGH
IBM InfoSphere Information Server 11.7 - Info Disclosure
CVSS 7.5
CVE-2022-34659
HIGH
Simcenter STAR-CCM+ Viewer - Unauthorized Exposure of User and Host Information via Power-on-Demand License Server
CVSS 7.5
CVE-2022-34712
MEDIUM
Windows Defender Credential Guard - Exposure of Sensitive Information
CVSS 5.5
CVE-2022-34710
MEDIUM
Windows Defender Credential Guard - Exposure of Sensitive Information
CVSS 5.5
CVE-2022-34708
MEDIUM
Windows Kernel - Information Disclosure
CVSS 5.5
CVE-2022-34704
MEDIUM
Windows Defender Credential Guard - Unauthorized Exposure of Sensitive Information
CVSS 4.7
CVE-2022-34692
MEDIUM
Microsoft Exchange Server - Exposure of Sensitive Information to an Unauthorized Actor
CVSS 5.3
CVE-2022-30197
MEDIUM
Windows 10, 11, Server 2016, 2019, 2022 - Kernel Information Disclosure
CVSS 5.5
CVE-2022-2704
MEDIUM
Simple E-Learning System - Information Disclosure via downloadFiles.php Download Parameter
CVSS 4.3
CVE-2022-27633
HIGH
TCL LinkHub Mesh Wifi MS1G_00_01.00_14 - Information Disclosure via confctl_get_guest_wlan
CVSS 7.5
CVE-2022-27630
HIGH
TCL LinkHub Mesh Wi-Fi AC1200 - Information Disclosure via confctl_get_master_wlan
CVSS 7.5
CVE-2022-29071
MEDIUM
Arista CloudVision Portal - Info Disclosure
CVSS 4.0
CVE-2022-36835
LOW
Samsung Internet Browser < 17.0.7.34 - Unauthorized File Access via Implicit Intent Hijacking
CVSS 3.3
CVE-2022-36834
LOW
Samsung Game Launcher < 6.0.07 - Exposure of Sensitive Information via Local App Data Access
CVSS 3.3
CVE-2022-33728
MEDIUM
Bluetooth <SMR Aug-2022 Release 1 - Info Disclosure
CVSS 4.0
CVE-2022-33724
LOW
Samsung Dialer <SMR Aug-2022 Release 1 - Info Disclosure
CVSS 3.3
CVE-2022-31190
MEDIUM
DSpace 4.0-6.3 - Exposure of Sensitive Information via XMLUI mets.xml
CVSS 5.3
CVE-2022-31185
MEDIUM
makedp mprweb < 5.0.0 - Unauthorized Email Address Exposure via Account Settings
CVSS 5.3
CVE-2022-31177
LOW
Flask-AppBuilder <4.1.3 - Info Disclosure
CVSS 2.7
CVE-2022-27614
MEDIUM
Synology Media Server < 1.8.1-2876 - Exposure of Sensitive Information via Web Server
CVSS 5.3
CVE-2022-31162
HIGH
Slack Morphism <0.41.0 - Info Disclosure
CVSS 7.5
Details
Vulnerabilities
10,151
Exploit Likelihood
High