CWE-201

367 vulnerabilities with CWE-201

CVE-2026-6267 HIGH

Insertion of Sensitive Information Into Sent Data in GitLab

CVSS 8.5

CVE-2026-67425 HIGH

Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url

CVSS 8.6

CVE-2026-54660 HIGH

swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`

CVSS 7.4

CVE-2026-64643 MEDIUM

Next.js: Unauthenticated Disclosure of Internal Server Function endpoints

CVSS 5.3

CVE-2026-65434 MEDIUM

WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability

CVSS 6.5

CVE-2026-66339 MEDIUM

Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels

CVSS 6.5

CVE-2026-16798 MEDIUM

Devolutions PowerShell Universal < 2026.2.3 - Insertion of Sensitive Information Into Sent Data

CVSS 6.5

CVE-2026-27372 MEDIUM

WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerability

CVSS 6.5

CVE-2026-12547 LOW

Libsoup: information disclosure in libsoup via soupauthmanager proxy credential leak on proxy switch

CVSS 3.4

CVE-2026-13380 CRITICAL

VSee Clinic and API Exposes Cleartext SFTP Credentials in Unauthenticated HTTP Responses

CVE-2026-54171 MEDIUM

Excon: redact additional sensitive/risky headers when following redirects

CVSS 6.5

CVE-2026-7488 HIGH

Sensitive Data Exposure in IKAS Technologies' E-Commerce

CVSS 7.5

CVE-2026-7189 HIGH

Sensitive Data Exposure in Proliz's OBS

CVSS 7.5

CVE-2026-44970 LOW

dbt-mcp: All MCP Tool Arguments Including Raw SQL and --vars Credentials Transmitted to dbt Labs Telemetry by Default Without Redaction

CVSS 3.1

CVE-2026-56460 MEDIUM

HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability

CVSS 6.5

CVE-2026-1365 MEDIUM

Information Disclosure in Sayax's OSOS

CVSS 6.5

CVE-2026-42505 MEDIUM

Invoking Encrypted Client Hello privacy leak in crypto/tls

CVSS 5.3

CVE-2026-59519 MEDIUM

WordPress FormLayer plugin <= 1.0.6 - Sensitive Data Exposure vulnerability

CVSS 5.3

CVE-2026-59511 MEDIUM

WordPress Exclusive Addons Elementor plugin <= 2.7.9.9 - Sensitive Data Exposure vulnerability

CVSS 5.3

CVE-2026-57347 MEDIUM

WordPress Hotel Booking Lite plugin <= 6.0.3 - Sensitive Data Exposure vulnerability

CVSS 6.5

CVE-2026-57736 HIGH

WordPress HubSpot plugin <= 11.3.51 - Sensitive Data Exposure vulnerability

CVSS 7.4

CVE-2026-13211 MEDIUM

Genucenter Disclosure of SNMP Credentials

CVSS 4.3

CVE-2026-12085 MEDIUM

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptable to an Insertion of Sensitive Information Into Sent Data vulnerability

CVSS 6.5

CVE-2026-13437 MEDIUM

Devolutions PowerShell Universal - Insertion of Sensitive Information Into Sent Data

CVSS 6.5

CVE-2026-57318 MEDIUM

WordPress Site Reviews plugin <= 8.0.11 - Sensitive Data Exposure vulnerability

CVSS 6.5