CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,086 vulnerabilities with CWE-200
CVE-2025-14075
MEDIUM
WP Hotel Booking <2.2.7 - Info Disclosure
CVSS 5.3
CVE-2025-24090
LOW
iPadOS < 18.3 - Improper Access Control
CVSS 3.3
CVE-2025-24089
MEDIUM
iPadOS < 18.3 - Unauthorized App Enumeration
CVSS 5.3
CVE-2025-68438
HIGH
Apache Airflow 3.1.0-3.1.5 - Exposure of Sensitive Information in Rendered Templates UI
CVSS 7.5
CVE-2025-15527
MEDIUM
WP Recipe Maker <10.2.2 - Info Disclosure
CVSS 4.3
CVE-2025-67399
MEDIUM
AIRTH SMART HOME AQI MONITOR Bootloader 1.005 - Unauthenticated Sensitive Information Exposure via UART Port
CVSS 4.6
CVE-2025-14464
MEDIUM
PDF Resume Parser <1.0 - Info Disclosure
CVSS 5.3
CVE-2025-68966
MEDIUM
HarmonyOS - Unauthorized Information Exposure via Notepad Permission Control
CVSS 5.1
CVE-2025-68965
MEDIUM
HarmonyOS - Unauthorized Information Exposure in Notepad Module
CVSS 4.7
CVE-2025-68959
MEDIUM
Media Library Module - Privilege Escalation
CVSS 6.2
CVE-2025-37165
HIGH
HPE Instant On Access Points - Info Disclosure
CVSS 7.5
CVE-2025-47855
CRITICAL
Fortinet FortiFone <7.0.2 - Info Disclosure
CVSS 9.8
CVE-2025-14507
MEDIUM
EventPrime - Events Calendar, Bookings and Tickets <4.2.7.0 - Info ...
CVSS 5.3
CVE-2025-65090
MEDIUM
XWiki Full Calendar Macro < 2.4.6 - Unauthenticated Exposure of Sensitive Information via Calendar.JSONService
CVSS 5.3
CVE-2025-46676
LOW
Dell PowerProtect Data Domain - Info Disclosure
CVSS 2.7
CVE-2025-14980
MEDIUM
BetterDocs <4.3.3 - Info Disclosure
CVSS 6.5
CVE-2025-14574
MEDIUM
weDocs < 2.1.15 - Unauthenticated Sensitive Information Exposure via REST API Endpoint
CVSS 5.3
CVE-2025-68719
HIGH
KAYSUS KS-WR3600 <1.0.5.9.1 - Info Disclosure
CVSS 8.8
CVE-2025-68718
MEDIUM
KAYSUS KS-WR1200 - Privilege Escalation
CVSS 5.4
CVE-2025-59469
CRITICAL
Veeam Backup & Replication 13.0.0.4967-13.0.1.1071 - Authenticated Arbitrary File Write as Root
CVSS 9.0
CVE-2025-47369
MEDIUM
Qualcomm AR8035 Firmware - Information Disclosure via Weak Session ID Hash in IOCTL Response
CVSS 5.5
CVE-2025-31964
LOW
HCL BigFix IVR 4.2 - Unprotected Administrative Service Exposure
CVSS 2.2
CVE-2025-13371
HIGH
MoneySpace plugin <2.13.9 - Info Disclosure
CVSS 8.6
CVE-2025-12540
MEDIUM
ShareThis Dashboard - Info Disclosure
CVSS 4.7
CVE-2025-13215
MEDIUM
Phlox theme plugin <2.17.13 - Info Disclosure
CVSS 5.3
Details
Vulnerabilities
10,086
Exploit Likelihood
High