CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,133 vulnerabilities with CWE-200
CVE-2024-8612
LOW
Red Hat Enterprise Linux - Information Disclosure in virtio-scsi, virtio-blk, and virtio-crypto Devices
CVSS 3.8
CVE-2024-47060
MEDIUM
Zitadel < 2.54.10 and 2.62.0-2.62.1 - Unauthorized Access via Inactive Organization Projects
CVSS 4.3
CVE-2024-47059
MEDIUM
Mautic 5.1.0 - Username Enumeration via Weak Password Login Response
CVSS 4.3
CVE-2024-46987
HIGH
Camaleon CMS 2.8.0-2.8.1 - Authenticated Path Traversal via MediaController Download
CVSS 7.7
CVE-2024-46979
MEDIUM
XWiki 13.2-14.10.20 Unauthorized Access via NotificationFilterPreferenceLivetableResults
CVSS 5.3
CVE-2024-8969
MEDIUM
OMFLOW < 1.2.0 - Authenticated Exposure of Sensitive Information
CVSS 6.5
CVE-2024-45811
MEDIUM
Vite 5.4.0-5.4.5, 5.3.0-5.3.5, 5.0.0-5.2.13, 4.0.0-4.5.4, < 3.2.11 - Unauthenticated Arbitrary File Read via @fs Bypass
CVSS 4.8
CVE-2024-44186
MEDIUM
macOS < 15.0 - Unprotected User Data Exposure via Sandbox Restriction Bypass
CVSS 5.5
CVE-2024-44184
MEDIUM
iPadOS < 17.7 - Unauthorized Access to User-Sensitive Data
CVSS 5.5
CVE-2024-44182
MEDIUM
macOS < 13.7, < 14.7, < 15 - Unprotected User Data Exposure via Shortcut Launch Failure Logging
CVSS 5.5
CVE-2024-44181
MEDIUM
macOS < 13.7, < 14.7, < 15 - Unauthorized Sensitive Location Information Exposure via Temporary File Handling
CVSS 5.5
CVE-2024-44180
LOW
iPadOS < 18.0 - Unauthorized Contact Access from Lock Screen
CVSS 2.4
CVE-2024-44163
MEDIUM
macOS < 13.7, < 14.7, < 15 - Unauthorized Access to Private Information
CVSS 5.5
CVE-2024-44158
MEDIUM
iPadOS < 17.7 - Unprotected User Data Exposure via Shortcut
CVSS 5.5
CVE-2024-44152
HIGH
macOS < 15.0 - Unprotected User Data Exposure via Log Entry
CVSS 7.5
CVE-2024-44139
LOW
iPadOS and iOS < 18 - Unauthorized Contact Access from Lock Screen
CVSS 2.4
CVE-2024-44129
MEDIUM
macOS < 13.7 - Unauthorized Sensitive Information Exposure
CVSS 5.5
CVE-2024-40863
MEDIUM
iPadOS < 18.0 - Unauthorized Exposure of Sensitive User Information
CVSS 5.5
CVE-2024-40862
MEDIUM
Xcode < 16.0 - Unauthorized Apple ID Exposure
CVSS 5.3
CVE-2024-40850
MEDIUM
macOS Ventura <13.7 - Info Disclosure
CVSS 5.5
CVE-2024-40842
MEDIUM
macOS Sequoia <15 - Info Disclosure
CVSS 5.5
CVE-2024-40838
LOW
macOS Sequoia <15 - Info Disclosure
CVSS 3.3
CVE-2024-45799
HIGH
FluxCP < 1.3.0 - Stored Cross-Site Scripting via Shop Names
CVSS 7.3
CVE-2024-8780
MEDIUM
OMFLOW < 1.2.1.3 - Unauthorized Sensitive Information Exposure via Data Query Functionality
CVSS 6.5
CVE-2024-8777
HIGH
syscomgo omflow 1.1.6.0-1.2.1.2 - Unauthenticated Information Leakage via LDAP Configuration
CVSS 7.5
Details
Vulnerabilities
10,133
Exploit Likelihood
High