CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,129 vulnerabilities with CWE-200
CVE-2024-56197
LOW
Discourse - Unauthorized Exposure of PM Titles and Metadata via PM Tags Feature
CVSS 2.2
CVE-2024-56902
HIGH
Geovision GV-ASManager <6.1.0.0 - Info Disclosure
CVSS 7.5
CVE-2024-34897
HIGH
Nedis SmartLife <1.4.0 - Info Disclosure
CVSS 7.5
CVE-2024-11741
MEDIUM
Grafana 10.4.0-10.4.14, 11.1.0-11.1.10, 11.2.0-11.2.5, 11.3.0-11.3.2, 11.4.0 - VictorOps Credential Exposure
CVSS 4.3
CVE-2024-13623
MEDIUM
WooCommerce Order Export <3.24 - Info Disclosure
CVSS 5.9
CVE-2024-23962
MEDIUM
Alpine Halo9 ilx-f509 Firmware - Unauthenticated Sensitive Information Exposure via DLT Interface
CVSS 5.3
CVE-2024-23937
MEDIUM
Silicon Labs Gecko OS - Unauthenticated Sensitive Information Exposure via Debug Interface Format String
CVSS 4.3
CVE-2024-8494
MEDIUM
Elementor Website Builder Pro <3.25.10 - Info Disclosure
CVSS 4.3
CVE-2024-48310
HIGH
AutoLib Software Systems OPAC <20.10 - Info Disclosure
CVSS 7.5
CVE-2024-54550
MEDIUM
iPadOS < 18.2 - Unauthorized Exposure of Autocompleted Contact Information in System Logs
CVSS 4.0
CVE-2024-54547
MEDIUM
macOS < 13.7.2, < 14.7.2, < 15.2 - Unprotected User Data Exposure
CVSS 5.5
CVE-2024-54475
LOW
macOS < 13.7.2, < 14.7.2, < 15.2 - Unprotected User Location Exposure via Log Entries
CVSS 3.3
CVE-2024-11090
MEDIUM
Membership Plugin - Restrict Content <= 3.2.13 - Unauthenticated Sensitive Information Exposure
CVSS 5.3
CVE-2024-13562
HIGH
Import WP <= 2.14.5 - Unauthenticated Sensitive Information Exposure
CVSS 7.5
CVE-2024-52975
CRITICAL
Elastic Fleet Server 8.13.0-8.14.2 - Sensitive Information Exposure via Log Files
CVSS 9.0
CVE-2024-43707
HIGH
Kibana 8.7.0-8.14.3 - Unauthorized Exposure of Elastic Agent Policy Information
CVSS 7.7
CVE-2024-49734
HIGH
Android - VPN Site Information Disclosure via Wi-Fi AP Side Channel
CVSS 7.5
CVE-2024-49733
MEDIUM
ServiceListing.java - Info Disclosure
CVSS 5.5
CVE-2024-12142
HIGH
Schneider Electric Modicon M340 & BMXNOE0100/BMXNOE0110/BMXNOR0200H - DoS & Info Disclosure via Web Manipulation
CVSS 8.6
CVE-2024-12637
MEDIUM
Moving Users plugin <1.05 - Info Disclosure
CVSS 5.3
CVE-2024-56136
MEDIUM
Zulip Server 7.0-9.4 - Unauthenticated Email Address Enumeration
CVSS 5.3
CVE-2024-48125
HIGH
HI-SCAN 6040i Hitrax HX-03-19-I - Info Disclosure
CVSS 7.5
CVE-2024-50338
HIGH
Git Credential Manager < 2.6.1 - Credential Leak via CR Line Ending Mismatch
CVSS 7.4
CVE-2024-12008
MEDIUM
W3 Total Cache <= 2.8.1 - Unauthenticated Sensitive Information Exposure via Debug Log File
CVSS 5.3
CVE-2024-42179
LOW
HCL MyXalytics - Sensitive Information Exposure via HTTP Response Header
CVSS 2.0
Details
Vulnerabilities
10,129
Exploit Likelihood
High