CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,146 vulnerabilities with CWE-200
CVE-2023-48129
MEDIUM
Line kimono-oldnew mini-app 13.6.1 - Unauthorized Sensitive Information Exposure via Channel Access Token Leakage
CVSS 5.4
CVE-2023-48135
MEDIUM
Line v13.6.1 - Exposure of Sensitive Information via Notification Channel Access Token
CVSS 5.4
CVE-2023-48132
MEDIUM
Line v13.6.1 - Exposure of Sensitive Information via Channel Access Token Leakage
CVSS 5.4
CVE-2023-48131
MEDIUM
Line v13.6.1 - Exposure of Sensitive Information via CHIGASAKI BAKERY Mini-App
CVSS 5.4
CVE-2023-48130
MEDIUM
Line GINZA CAFE mini-app 13.6.1 - Unauthorized Sensitive Information Exposure via Channel Access Token Leakage
CVSS 5.4
CVE-2023-43998
MEDIUM
Line v13.6.1 - Exposure of Sensitive Information via Notification Channel Access Token Leakage
CVSS 5.4
CVE-2023-43997
MEDIUM
Yoruichi hobby base mini-app <Line v13.6.1 - Info Disclosure
CVSS 5.4
CVE-2023-43996
MEDIUM
Q co ltd mini-app on Line <13.6.1 - Info Disclosure
CVSS 5.4
CVE-2023-43995
MEDIUM
picot.golf mini-app <Line 13.6.1 - Info Disclosure
CVSS 5.4
CVE-2023-43994
MEDIUM
Line v13.6.1 - Exposure of Sensitive Information via Channel Access Token Leakage
CVSS 5.4
CVE-2023-43993
MEDIUM
Line 13.6.1 - Exposure of Sensitive Information via Channel Access Token Leakage
CVSS 5.4
CVE-2023-43992
MEDIUM
STOCKMAN GROUP mini-app <Line 13.6.1 - Info Disclosure
CVSS 5.4
CVE-2023-48714
MEDIUM
Silverstripe Framework <4.13.39, <5.1.11 - Info Disclosure
CVSS 4.3
CVE-2023-42888
MEDIUM
iPadOS 16.0-16.7.5 - Exposure of Sensitive Information via Maliciously Crafted Image
CVSS 5.5
CVE-2023-28901
MEDIUM
Skoda Connect - Unauthenticated Exposure of Sensitive Vehicle Data via VIN Parameter
CVSS 5.3
CVE-2023-28900
MEDIUM
Skoda Connect - Unauthenticated Exposure of Sensitive User Information via VIN Query
CVSS 5.3
CVE-2023-7031
MEDIUM
Avaya Aura Experience Portal 8.0.0-8.1.2.0.0402 - Authenticated Insecure Direct Object Reference
CVSS 5.7
CVE-2023-50950
LOW
IBM QRadar SIEM 7.5 - Unauthorized Sensitive Email Information Exposure via Offense Rule Responses
CVSS 3.7
CVE-2023-45236
MEDIUM
EDK2 < 202311 - Predictable TCP Initial Sequence Number in Network Package
CVSS 5.8
CVE-2023-52101
CRITICAL
Huawei EMUI and HarmonyOS - Exposure of Sensitive Information via Wi-Fi Module
CVSS 9.1
CVE-2023-44112
HIGH
Device Authentication Module - Memory Corruption
CVSS 7.5
CVE-2023-50290
MEDIUM
Apache Solr 9.0.0-9.2.9 - Authenticated Exposure of Sensitive Information via Metrics API
CVSS 6.5
CVE-2023-49261
HIGH
Token Key Disclosure - Info Disclosure
CVSS 7.5
CVE-2023-6266
HIGH
WordPress Backup Migration <1.3.6 - Info Disclosure
CVSS 7.5
CVE-2023-42934
MEDIUM
iPadOS < 17.0 - Unauthorized Information Disclosure via Root App
CVSS 4.2
Details
Vulnerabilities
10,146
Exploit Likelihood
High