CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,119 vulnerabilities with CWE-200
CVE-2025-20611
MEDIUM
Intel(R) Tiber Edge Platform - Info Disclosure
CVSS 4.7
CVE-2025-20030
LOW
Intel(R) Tiber Edge Platform - Info Disclosure
CVSS 2.6
CVE-2025-20013
MEDIUM
Intel(R) Tiber Edge Platform - Info Disclosure
CVSS 5.5
CVE-2025-32703
MEDIUM
Visual Studio 2017, 2019, 2022 - Information Disclosure via Insufficient Access Control
CVSS 5.5
CVE-2025-31256
MEDIUM
macOS < 15.5 - Unprotected User Data Exposure via Hot Corner Cache Handling
CVSS 5.5
CVE-2025-31250
MEDIUM
macOS < 15.5 - Unprotected User Data Exposure
CVSS 5.5
CVE-2025-31242
MEDIUM
iPadOS < 17.7.7 - Unauthorized Sensitive Data Exposure via Log Entries
CVSS 5.5
CVE-2025-31236
MEDIUM
macOS < 15.5 - Unprotected User Data Exposure
CVSS 5.5
CVE-2025-31225
HIGH
iPadOS < 18.5 - Exposure of Sensitive Call History in Spotlight Search
CVSS 7.1
CVE-2025-31220
MEDIUM
iPadOS < 17.7.7 and macOS < 13.7.6, < 14.7.6, < 15.5 - Unauthorized Sensitive Location Data Exposure
CVSS 5.5
CVE-2025-31218
MEDIUM
macOS < 15.5 - Unauthorized Hostname Exposure via Network Connection Monitoring
CVSS 6.2
CVE-2025-31207
HIGH
iPadOS < 18.5 - Unauthorized App Enumeration
CVSS 7.7
CVE-2025-24220
MEDIUM
iPadOS < 18.4 - Unauthorized Sensitive Information Exposure via Persistent Device Identifier
CVSS 5.5
CVE-2025-24155
MEDIUM
macOS < 13.7.6, < 14.7.6, < 15.3 - Kernel Memory Disclosure
CVSS 5.5
CVE-2025-24144
MEDIUM
Apple iPadOS < 17.7.7 - Information Disclosure via Kernel State Leak
CVSS 5.5
CVE-2025-24142
MEDIUM
macOS < 13.7.6, < 14.7.6, < 15.5 - Unprotected User Data Exposure via Log Entry Redaction
CVSS 5.5
CVE-2025-4536
MEDIUM
Gosuncn Audio-Visual Platform 1.0 Information Disclosure via /sysmgr/user/listByPage
CVSS 5.3
CVE-2025-4535
MEDIUM
Gosuncn Audio-Visual Platform 4.0 - Configuration File Information Disclosure
CVSS 5.3
CVE-2025-4526
MEDIUM
Dgitro NGC Explorer 3.44.15 - Missing Password Field Masking in Configuration Page
CVSS 4.3
CVE-2025-20221
MEDIUM
Cisco IOS XE SD-WAN - Unauthenticated Traffic Filter Bypass via Crafted Packet
CVSS 5.3
CVE-2025-3851
MEDIUM
WP SmartPay <2.7.13 - Insecure Direct Object Reference
CVSS 4.3
CVE-2025-47418
MEDIUM
Crestron Automate VX <6.4.0.49 - Info Disclosure
CVE-2025-47417
MEDIUM
Crestron Automate VX <6.4.0.49 - Info Disclosure
CVE-2025-46820
HIGH
phpgt/Dom < 4.1.8 - Exposure of Sensitive Information via GitHub Token in Workflow Artifact
CVSS 7.1
CVE-2025-46813
MEDIUM
Discourse 3.5.0.beta4 - Unauthenticated Exposure of Sensitive Information via Homepage Content Leak
CVSS 5.8
Details
Vulnerabilities
10,119
Exploit Likelihood
High