CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,129 vulnerabilities with CWE-200
CVE-2024-32870
MEDIUM
Combodo iTop < 2.7.11 - Unauthenticated Exposure of Sensitive Information
CVSS 5.8
CVE-2024-8553
MEDIUM
Red Hat Satellite 6.13-6.16 - Authenticated Sensitive Information Exposure via Foreman Loader Macros
CVSS 6.3
CVE-2024-33626
MEDIUM
LevelOne WBR-6012 Firmware - Unauthenticated Sensitive Information Exposure via Hidden Web Page
CVSS 5.3
CVE-2024-33603
MEDIUM
LevelOne WBR-6012 Firmware - Unauthenticated Sensitive Information Exposure via Verbose System Log Page
CVSS 5.3
CVE-2024-10360
MEDIUM
Move Addons for Elementor <= 1.3.5 - Authenticated Sensitive Information Exposure via Widget Render Function
CVSS 4.3
CVE-2024-10312
MEDIUM
Exclusive Addons for Elementor <2.7.4 - Info Disclosure
CVSS 4.3
CVE-2024-30106
LOW
HCL Connections - Exposure of Sensitive Information via IBM WebSphere Request Handling
CVSS 3.5
CVE-2024-10357
MEDIUM
Clever Addons for Elementor <2.2.1 - Info Disclosure
CVSS 4.3
CVE-2024-49357
HIGH
ZimaOS < 1.2.5 - Unauthenticated Sensitive Data Exposure via API Endpoints
CVSS 7.5
CVE-2024-10050
MEDIUM
Elementor Header & Footer Builder <1.6.43 - Info Disclosure
CVSS 4.3
CVE-2024-10290
MEDIUM
ZZCMS 2023 - Exposure of Sensitive Information in com/inc.php
CVSS 5.3
CVE-2024-9530
MEDIUM
Qi Addons For Elementor <= 1.8.0 - Authenticated Sensitive Information Exposure via Private Templates
CVSS 4.3
CVE-2024-50312
MEDIUM
OpenShift Container Platform - Unauthenticated Exposure of Sensitive GraphQL Schema Information via Introspection Query
CVSS 5.3
CVE-2024-9541
MEDIUM
News Kit Elementor Addons <= 1.2.1 - Authenticated Sensitive Information Exposure via Canvas Menu Render Function
CVSS 4.3
CVE-2024-9627
HIGH
TeploBot - Telegram Bot for WP <= 1.3 - Unauthenticated Sensitive Information Exposure via service_process Function
CVSS 8.6
CVE-2024-8852
MEDIUM
All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Sensitive Information Exposure via Public Log Files
CVSS 5.3
CVE-2024-45309
HIGH
OneDev Unauthenticated Arbitrary File Read
CVSS 7.5
CVE-2024-9889
MEDIUM
ElementInvader Addons for Elementor <= 1.2.9 - Authenticated Sensitive Information Exposure via Page Loader Widget
CVSS 4.3
CVE-2024-42508
MEDIUM
HPE OneView <= 9.20.00 - Information Disclosure
CVSS 5.5
CVE-2024-49284
MEDIUM
BogdanFix WP SendFox <1.3.1 - Info Disclosure
CVSS 5.3
CVE-2024-7417
MEDIUM
Royal Elementor Addons < 1.3.986 - Authenticated Information Exposure via data_fetch
CVSS 4.3
CVE-2024-22032
MEDIUM
Rancher RKE1 - Plaintext Secret Exposure During Reconciliation
CVSS 6.5
CVE-2024-9540
MEDIUM
Elementor Sina Extension <= 3.5.7 - Authenticated Sensitive Information Exposure
CVSS 4.3
CVE-2024-21209
LOW
MySQL Client <= 8.4.2 and <= 9.0.1 - Exposure of Sensitive Information in mysqldump
CVSS 2.0
CVE-2024-21205
MEDIUM
Oracle Fusion Middleware 12.2.1.4.0 - Unauthorized Data Access via OSB Core Functionality
CVSS 6.5
Details
Vulnerabilities
10,129
Exploit Likelihood
High