CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,133 vulnerabilities with CWE-200
CVE-2024-42006
HIGH
Keyfactor AWS Orchestrator < 2.01 - Information Disclosure
CVSS 7.5
CVE-2024-41700
HIGH
Barix SIP Client Firmware - Exposure of Sensitive Information to an Unauthorized Actor
CVSS 7.5
CVE-2024-41698
MEDIUM
Priority < 24.0 - Exposure of Sensitive Information to an Unauthorized Actor
CVSS 4.3
CVE-2024-7925
MEDIUM
ZZCMS 2023 - Information Disclosure via eginfo.php phome Parameter
CVSS 4.3
CVE-2024-42658
CRITICAL
Wishnet Nepstech Wifi Router <1.0 - Info Disclosure
CVSS 9.8
CVE-2024-42657
HIGH
Wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 - Info Disclosure
CVSS 7.5
CVE-2024-42486
MEDIUM
Cilium <1.15.8-1.16.1 - Privilege Escalation
CVSS 5.4
CVE-2024-7630
MEDIUM
Relevanssi < 4.23.0 and Premium < 2.25.1 - Unauthenticated Sensitive Information Exposure via Search Query
CVSS 5.3
CVE-2024-7843
MEDIUM
Online Graduate Tracer System 1.0 - Information Disclosure in Export CSV Function
CVSS 5.3
CVE-2024-7842
MEDIUM
SourceCodester Online Graduate Tracer System 1.0 - Information Disclosure in Export Function
CVSS 5.3
CVE-2024-27731
MEDIUM
Friendica 2023.12 - Cross-Site Scripting via File Attachment Parameter
CVSS 6.1
CVE-2024-31799
MEDIUM
GNCC's GC2 Indoor Security Camera 1080P - Info Disclosure
CVSS 4.6
CVE-2024-7411
MEDIUM
Newsletters plugin <4.9.9 - Info Disclosure
CVSS 5.3
CVE-2024-7063
MEDIUM
ElementsKit Pro <= 3.6.6 - Authenticated Sensitive Information Exposure via render_raw Function
CVSS 4.3
CVE-2024-27120
HIGH
ComfortKey <24.1.2 - Info Disclosure
CVSS 7.5
CVE-2024-42435
MEDIUM
Zoom Workplace Apps - Info Disclosure
CVSS 4.9
CVE-2024-39822
MEDIUM
Zoom Meeting SDK <6.0.12, Rooms <6.1.0, Rooms Controller <6.1.0, Workplace <6.0.12 - Sensitive Info Exposure
CVSS 6.5
CVE-2024-41723
MEDIUM
F5 BIG-IP 15.1.0 - Exposure of Sensitive Information via iControl REST
CVSS 4.3
CVE-2024-38760
MEDIUM
David Maucher Send Users Email <1.5.1 - Info Disclosure
CVSS 5.3
CVE-2024-38756
MEDIUM
Weblizar Coming Soon <1.6.3 - Info Disclosure
CVSS 5.3
CVE-2024-38749
MEDIUM
Olive Themes Olive One Click Demo Import <1.1.2 - Info Disclosure
CVSS 5.3
CVE-2024-38747
HIGH
HitPay Payment Gateway <4.1.3 - Info Disclosure
CVSS 7.5
CVE-2024-38742
MEDIUM
MBE eShip <= 2.1.2 - Exposure of Sensitive Information via Improper Access Control
CVSS 5.3
CVE-2024-41736
MEDIUM
SAP Permit to Work - Authenticated Exposure of Sensitive Information
CVSS 4.3
CVE-2024-41733
MEDIUM
SAP Commerce - Unauthenticated User Enumeration via Registration and Login Processes
CVSS 5.3
Details
Vulnerabilities
10,133
Exploit Likelihood
High