CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,151 vulnerabilities with CWE-200
CVE-2022-0854
MEDIUM
Linux Kernel < 5.16 - Memory Leak in DMA Subsystem
CVSS 5.5
CVE-2022-1004
MEDIUM
OTRS 7.0.0-7.0.32 - Unauthorized Exposure of Accounted Time in Ticket Detail View
CVSS 4.3
CVE-2022-25602
HIGH
ExpressTech Responsive Menu <= 4.1.7 - Arbitrary File Upload via Nonce Token Leak
CVSS 8.3
CVE-2022-25248
MEDIUM
PTC Axeda Agent and Desktop Server - Unauthenticated Sensitive Information Exposure via Event Log Port
CVSS 5.3
CVE-2022-0430
MEDIUM
httpie < 3.1.0 - Exposure of Sensitive Information
CVSS 5.3
CVE-2022-24762
MEDIUM
sysend.js < 1.10.0 - Origin Validation Error
CVSS 6.5
CVE-2022-24742
MEDIUM
Sylius <1.9.10, <1.10.11, <1.11.2 - Info Disclosure
CVSS 5.0
CVE-2022-25512
HIGH
FreeTAKServer-UI 1.9.8 - Exposure of Sensitive API and Websocket Keys
CVSS 7.5
CVE-2022-26847
MEDIUM
SPIP <3.2.14, <4.0.5 - Info Disclosure
CVSS 5.3
CVE-2022-25830
LOW
Samsung Galaxy Watch3 Plugin < 2.2.03.22012751 - Information Exposure via Log File
CVSS 1.9
CVE-2022-25829
LOW
Samsung Watch Active2 Plugin < 2.2.08.22012751 - Information Exposure via Log File
CVSS 1.9
CVE-2022-25828
LOW
Samsung Watch Active Plugin < 2.2.07.22012751 - Information Exposure via Log File
CVSS 1.9
CVE-2022-25827
LOW
Samsung Galaxy Watch Plugin < 2.2.05.22012751 - Information Exposure via Log File
CVSS 1.9
CVE-2022-25826
LOW
Samsung Galaxy Watch 3 Plugin < 2.2.03.22012751 - Sensitive Information Exposure in Log Files
CVSS 1.9
CVE-2022-25823
LOW
Samsung Galaxy Watch Plugin < 2.2.05.220126741 - Information Exposure via Log File
CVSS 1.9
CVE-2022-24398
MEDIUM
SAP Business Objects Business Intelligence Platform - Info Disclosure
CVSS 6.5
CVE-2022-22547
HIGH
Simple Diagnostics Agent <1.57 - Info Disclosure
CVSS 7.5
CVE-2022-0813
MEDIUM
phpMyAdmin < 5.1.1 and 5.1.2 - Exposure of Sensitive Information via Invalid Requests
CVSS 5.3
CVE-2022-0725
HIGH
KeePass - Information Exposure via Plain Text Password Logging
CVSS 7.5
CVE-2022-0516
HIGH
Linux Kernel < 5.17 - Unauthorized Memory Write Access via KVM s390 Guest SIDA Operation
CVSS 7.8
CVE-2022-24747
MEDIUM
Shopware <6.4.8.2 - Info Disclosure
CVSS 6.3
CVE-2022-24737
MEDIUM
httpie < 3.1.0 - Exposure of Sensitive Information via Session Cookie Handling
CVSS 6.5
CVE-2022-0384
MEDIUM
Zoom WordPress Plugin <3.8.17 - Info Disclosure
CVSS 4.3
CVE-2022-24725
MEDIUM
shescape 1.4.0-1.5.1 - Home Directory Exposure via Interpolation Option in Bash
CVSS 6.2
CVE-2022-23648
HIGH
containerd < 1.4.12 - Unauthorized File Access via CRI Image Configuration
CVSS 7.5
Details
Vulnerabilities
10,151
Exploit Likelihood
High