CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,146 vulnerabilities with CWE-200
CVE-2024-0569
MEDIUM
Totolink T8 4.1.5cu.833 - Info Disclosure
CVSS 4.3
CVE-2024-0490
MEDIUM
Huaxia ERP < 3.1 - Information Disclosure via /user/getAllList Endpoint
CVSS 5.3
CVE-2024-0472
LOW
Dormitory Management System 1.0 - Info Disclosure
CVSS 3.5
CVE-2024-21320
MEDIUM
Windows 10/11, Server 2012-2022 - Sensitive Info Exposure via Theme Spoofing
CVSS 6.5
CVE-2024-0340
MEDIUM
Linux Kernel < 6.4 - Unauthorized Memory Read via vhost_new_msg
CVSS 4.4
CVE-2024-0305
MEDIUM
Ncast < 2017 - Exposure of Sensitive Information via Guest Login
CVSS 5.3
CVE-2023-7320
MEDIUM
WooCommerce <7.8.2 - Info Disclosure
CVSS 5.3
CVE-2023-49367
HIGH
Kyocera Command Center RX EXOSYS M5521cdn - Info Disclosure
CVSS 8.8
CVE-2023-47799
HIGH
Mahara < 22.10.4 and 23.x < 23.04.4 - Unauthorized Information Disclosure via HTML Bulk Export
CVSS 7.5
CVE-2023-47029
CRITICAL
NCR Terminal Handler 1.5.1 - Remote Code Execution and Sensitive Information Exposure via UserService POST Request
CVSS 9.8
CVE-2023-47298
MEDIUM
NCR Terminal Handler 1.5.1 - Authenticated Exposure of Sensitive Information via SOAP API Endpoint
CVSS 4.3
CVE-2023-46669
MEDIUM
Elastic Agent/Elastic Security Endpoint - Info Disclosure
CVSS 6.2
CVE-2023-40723
HIGH
FortiSIEM 5.1.0-6.4.2 - Exposure of Sensitive Information via API Request
CVSS 8.1
CVE-2023-40108
MEDIUM
Android - Unauthorized Media Content Access via Missing Permission Check
CVSS 5.5
CVE-2023-24012
HIGH
OpenDDS Secure DDS - PKCS#7 Permission Verification Bypass
CVSS 8.2
CVE-2023-24011
HIGH
ZettaScale DDS - PKCS#7 Permission Verification Bypass
CVSS 8.2
CVE-2023-24010
HIGH
eProsima DDS - PKCS#7 Permission Verification Bypass
CVSS 8.2
CVE-2023-31280
MEDIUM
AirVantage Online Warranty Checker - Info Disclosure
CVSS 5.3
CVE-2023-29116
MEDIUM
Enel X Waybox Pro < 2.1.1.0_jb3vu096a - Unauthenticated Sensitive Information Exposure
CVSS 4.3
CVE-2023-29114
MEDIUM
Enel X JuiceBox Pro 3.0 22kW Cellular < 2.1.1.0_JB3VU096A - Sensitive Information Exposure
CVSS 5.7
CVE-2023-5359
LOW
W3 Total Cache <= 2.7.5 - Unauthenticated Sensitive Information Exposure via Google OAuth API Secrets
CVSS 3.7
CVE-2023-37232
HIGH
Loftware Spectrum < 4.6 - Unauthorized Sensitive Information Exposure via Logs
CVSS 7.5
CVE-2023-48957
MEDIUM
PureVPN Linux client <2.0.2-Productions - Info Disclosure
CVSS 5.3
CVE-2023-42948
LOW
macOS < 14.0 - Unauthorized Wi-Fi Password Exposure in Recovery Mode
CVSS 3.3
CVE-2023-42925
LOW
iPadOS < 17.0 - Unauthorized Access to Notes Attachments
CVSS 3.3
Details
Vulnerabilities
10,146
Exploit Likelihood
High