CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,134 vulnerabilities with CWE-200
CVE-2024-6547
MEDIUM
Add Admin CSS <2.0.1 - Info Disclosure
CVSS 5.3
CVE-2024-6546
MEDIUM
One Click Close Comments <2.7.1 - Info Disclosure
CVSS 5.3
CVE-2024-6545
MEDIUM
Admin Trim Interface <3.5.1 - Info Disclosure
CVSS 5.3
CVE-2024-7128
MEDIUM
Red Hat OpenShift Container Platform 4.16-4.18 - Exposure of Sensitive Information via Unauthenticated Endpoints
CVSS 5.3
CVE-2024-7091
MEDIUM
GitLab 15.6-17.0.4, 17.1-17.1.2, 17.2 - Unauthorized Information Disclosure via Exported Group or Project
CVSS 4.1
CVE-2024-7060
LOW
GitLab 15.4-17.0.4, 17.1-17.1.2, 17.2 - Unauthorized Information Disclosure in Project/Group Exports
CVSS 2.6
CVE-2024-5067
MEDIUM
GitLab 16.11-17.0.4, 17.1-17.1.2, 17.2 - Unauthorized Exposure of Project Analytics Settings
CVSS 4.4
CVE-2024-41672
HIGH
DuckDB < 1.1.0 - Unauthorized File Read via sniff_csv Function
CVSS 7.5
CVE-2024-39676
HIGH
Apache Pinot 0.1-1.0.0 - Exposure of Sensitive Information via /appconfigs Endpoint
CVSS 7.5
CVE-2024-6571
MEDIUM
Wpchill Optimize Images Alt Text (alt Tag) & Names For Seo Using AI < 3.1.2 - Information Disclosure
CVSS 5.3
CVE-2024-6553
MEDIUM
WP Meteor Website Speed Optimization Addon <3.4.3 - Info Disclosure
CVSS 5.3
CVE-2024-23321
HIGH
Apache RocketMQ 4.5.2-5.2.0 - Authenticated Sensitive Information Exposure via Specific Interfaces
CVSS 8.8
CVE-2024-6560
MEDIUM
Addonify - Quick View For WooCommerce <1.2.16 - Info Disclosure
CVSS 5.3
CVE-2024-6455
MEDIUM
ElementsKit Elementor addons <3.2.0 - Info Disclosure
CVSS 5.3
CVE-2024-40647
MEDIUM
Sentry-sdk <2.8.0 - Info Disclosure
CVSS 5.3
CVE-2024-29885
MEDIUM
Silverstripe Reports <5.2.3 - Info Disclosure
CVSS 4.3
CVE-2024-40633
MEDIUM
Sylius <1.12.18-1.13.3 - Info Disclosure
CVSS 5.3
CVE-2024-20396
MEDIUM
Cisco Webex App - Unauthenticated Exposure of Sensitive Information via File Protocol Handler
CVSS 5.3
CVE-2024-21152
HIGH
Oracle Process Manufacturing Financials 12.2.12-12.2.13 - Sensitive Information Exposure in Allocation Rules
CVSS 8.1
CVE-2024-21147
HIGH
Netapp Active IQ Unified Manager - Information Disclosure
CVSS 7.4
CVE-2024-21140
MEDIUM
Netapp Bluexp - Information Disclosure
CVSS 4.8
CVE-2024-21136
HIGH
Oracle Retail Xstore Office <=23.0.1 - Unauthenticated Sensitive Information Exposure
CVSS 8.6
CVE-2024-6395
MEDIUM
GitHub Enterprise Server <3.14 - Info Disclosure
CVSS 5.3
CVE-2024-6336
MEDIUM
GitHub Enterprise Server <3.14 - Info Disclosure
CVSS 5.3
CVE-2024-6570
MEDIUM
Glossary plugin <2.2.26 - Info Disclosure
CVSS 5.3
Details
Vulnerabilities
10,134
Exploit Likelihood
High