CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,133 vulnerabilities with CWE-200
CVE-2024-22032
MEDIUM
Rancher RKE1 - Plaintext Secret Exposure During Reconciliation
CVSS 6.5
CVE-2024-9540
MEDIUM
Elementor Sina Extension <= 3.5.7 - Authenticated Sensitive Information Exposure
CVSS 4.3
CVE-2024-21209
LOW
MySQL Client <= 8.4.2 and <= 9.0.1 - Exposure of Sensitive Information in mysqldump
CVSS 2.0
CVE-2024-21205
MEDIUM
Oracle Fusion Middleware 12.2.1.4.0 - Unauthorized Data Access via OSB Core Functionality
CVSS 6.5
CVE-2024-47824
HIGH
matrix-react-sdk <3.102.0 - Info Disclosure
CVE-2024-47779
HIGH
Element Web <1.11.80 - Info Disclosure
CVE-2024-47771
HIGH
Element Desktop <1.11.80 - Info Disclosure
CVE-2024-47080
HIGH
matrix-js-sdk <34.7.0 - Info Disclosure
CVE-2024-6757
MEDIUM
Elementor Website Builder - Info Disclosure
CVSS 4.3
CVE-2024-9546
MEDIUM
WPIDE - File Manager & Code Editor <= 3.4.9 - Unauthenticated Full Path Disclosure via PHP-Parser Library
CVSS 5.3
CVE-2024-48824
HIGH
Automatic Systems Maintenance SlimLane 29565 - Info Disclosure
CVSS 7.5
CVE-2024-48789
HIGH
INATRONIC com.inatronic.drivedeck.home <2.6.23 - Info Disclosure
CVSS 7.5
CVE-2024-48799
HIGH
LOREX TECHNOLOGY INC com.lorexcorp.lorexping <1.4.22 - Info Disclosure
CVSS 7.5
CVE-2024-48798
HIGH
Hubble Connected <2.00.81 - Info Disclosure
CVSS 7.5
CVE-2024-48797
HIGH
PCS Engineering Preston Cinema <0.2.0 - Info Disclosure
CVSS 7.5
CVE-2024-48796
HIGH
EQUES com.eques.plug <1.0.1 - Info Disclosure
CVSS 7.5
CVE-2024-45739
MEDIUM
Splunk < 9.3.1, < 9.2.3, < 9.1.6 - Plaintext Password Exposure in AdminManager Debug Log
CVSS 4.9
CVE-2024-45738
MEDIUM
Splunk 9.1.0-9.1.5 - Sensitive Information Exposure via REST_Calls Log Channel
CVSS 4.9
CVE-2024-8902
MEDIUM
Elementor Addon Elements < 1.13.8 - Authenticated Sensitive Information Exposure via Data Table Render Column
CVSS 4.3
CVE-2024-9821
HIGH
WooCommerce plugin <1.2.4 - Info Disclosure
CVSS 8.8
CVE-2024-9539
MEDIUM
GitHub Enterprise Server < 3.11.16 - Information Disclosure via Malicious SVG Asset URL
CVSS 4.3
CVE-2024-39527
MEDIUM
Junos OS on SRX Series Authenticated Sensitive Information Exposure via CLI Command Injection
CVSS 5.5
CVE-2024-9538
MEDIUM
ShopLentor <= 2.9.8 - Authenticated Sensitive Information Exposure via WL FAQ Render Function
CVSS 4.3
CVE-2024-8913
MEDIUM
The Plus Addons for Elementor < 5.6.11 - Sensitive Information Exposure via TP Accordion Widget
CVSS 4.3
CVE-2024-47868
HIGH
Gradio < 5.0.0 - Path Traversal and Arbitrary File Read via FileData Components
CVSS 7.5
Details
Vulnerabilities
10,133
Exploit Likelihood
High