CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,142 vulnerabilities with CWE-200
CVE-2024-6556
MEDIUM
SmartCrawl WordPress SEO checker <3.10.8 - Info Disclosure
CVSS 5.3
CVE-2024-6550
MEDIUM
Gravity Forms: Multiple Form Instances <1.1.1 - Info Disclosure
CVSS 5.3
CVE-2024-32670
HIGH
Samsung Galaxy SmartTag2 <0.20.04 - Info Disclosure
CVE-2024-38970
MEDIUM
vaethink 1.0.2 - Exposure of Sensitive Information via Access Management Administrator Function
CVSS 4.9
CVE-2024-27362
MEDIUM
Samsung Mobile Processors - Info Disclosure
CVSS 4.4
CVE-2024-38041
MEDIUM
Windows Kernel - Information Disclosure
CVSS 5.5
CVE-2024-38030
MEDIUM
Windows 10/11, Server 2012-2022 - Unauthorized Information Exposure via Theme Spoofing
CVSS 6.5
CVE-2024-38020
MEDIUM
Microsoft Outlook - Spoofing
CVSS 6.5
CVE-2024-38017
MEDIUM
Microsoft Message Queuing - Info Disclosure
CVSS 5.5
CVE-2024-30081
HIGH
Windows NTLM Spoofing - Privilege Escalation
CVSS 7.1
CVE-2024-6612
MEDIUM
Firefox < 128 and Thunderbird < 128 - DNS Prefetch Information Leak via CSP Violation Console Links
CVSS 5.3
CVE-2024-3228
MEDIUM
Social Sharing Plugin - Kiwi plugin for WordPress <2.1.7 - Info Dis...
CVSS 5.3
CVE-2024-39600
MEDIUM
SAP GUI for Windows - Unauthenticated Exposure of Sensitive Information via Memory
CVSS 5.0
CVE-2024-37180
MEDIUM
SAP Basis - Unauthenticated Exposure of Sensitive Information via Remote-Enabled Function Module
CVSS 4.1
CVE-2024-39593
MEDIUM
SAP Landscape Management - Authenticated Exposure of Sensitive Information via REST Provider Definition Response
CVSS 6.9
CVE-2024-39896
HIGH
Directus < 10.13.0 - User Enumeration via SSO Error Messages
CVSS 7.5
CVE-2024-23562
MEDIUM
HCL Domino - Unauthenticated Sensitive Information Exposure
CVSS 5.3
CVE-2024-40597
HIGH
MediaWiki <1.42.1 - Info Disclosure
CVSS 7.5
CVE-2024-39182
HIGH
ISPmanager <6.98.0 - Info Disclosure
CVSS 7.5
CVE-2024-39210
HIGH
Best House Rental Management System < 1.0 - Arbitrary File Read via Page Parameter
CVSS 7.5
CVE-2024-6506
HIGH
MRW plugin <5.4.3 - Info Disclosure
CVSS 8.2
CVE-2024-32754
LOW
Johnson Controls Kantech KT1, KT2, KT400 - Unauthenticated Sensitive Info Exposure via Factory Reset
CVSS 3.1
CVE-2024-39683
MEDIUM
ZITADEL 2.53.0-2.53.7 - Unauthorized Exposure of User Sessions via Session Listing
CVSS 5.7
CVE-2024-36122
LOW
Discourse < 3.2.3 and < 3.3.0.beta4 - Unauthorized Email Exposure in Review Queue
CVSS 2.4
CVE-2024-6426
HIGH
MESbook 20221021.03 - Info Disclosure
CVSS 8.1
Details
Vulnerabilities
10,142
Exploit Likelihood
High