The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.
128 vulnerabilities with CWE-204
CVE-2026-28358
MEDIUM
NocoDB <0.301.3 - Info Disclosure
CVSS 5.3
CVE-2026-28288
Dify <1.9.0 - Info Disclosure
CVE-2026-25138
MEDIUM
Rucio <35.8.3/<38.5.4/<39.3.1 - Info Disclosure
CVSS 5.3
CVE-2025-62512
MEDIUM
Piwigo 15.5.0 - Info Disclosure
CVSS 5.3
CVE-2026-27480
MEDIUM
Static Web Server 2.1.0-2.40.1 - Auth Bypass
CVSS 5.3
CVE-2026-26744
MEDIUM
FormaLMS <4.1.18 - Info Disclosure
CVSS 5.3
CVE-2019-25338
MEDIUM
DokuWiki 2018-04-22b - Info Disclosure
CVSS 5.3
CVE-2026-25509
MEDIUM
Ci4-cms-erp Ci4ms < 0.28.5.0 - Information Disclosure
CVSS 5.3
CVE-2026-24664
MEDIUM
Open eClass <4.2 - Info Disclosure
CVSS 5.3
CVE-2026-24332
MEDIUM
Discord - Info Disclosure
CVSS 4.3
CVE-2026-23511
MEDIUM
ZITADEL <4.9.1, 3.4.6 - Info Disclosure
CVSS 5.3
CVE-2026-21484
MEDIUM
AnythingLLM <e287fab56089cf8fcea9ba579a3ecdeca0daa313 - Info Disclo...
CVSS 5.3
CVE-2025-69413
MEDIUM
Gitea <1.25.2 - Info Disclosure
CVSS 5.3
CVE-2025-67874
MEDIUM
Churchcrm < 6.5.0 - XSS
CVSS 6.5
CVE-2025-62181
MEDIUM
Pega Platform <25.1.0 - Info Disclosure
CVSS 5.3
CVE-2025-67500
LOW
Mastodon <4.2.27, <4.3.0-beta.1-4.3.14, <4.4.0-beta.1-4.4.9, <4.5.0...
CVSS 3.7
CVE-2021-47717
IntelliChoice eFORCE Software Suite 2.5.9 - Info Disclosure
CVE-2025-40806
MEDIUM
Gridscale X Prepay <V4.2.1 - Info Disclosure
CVSS 5.3
CVE-2025-65899
MEDIUM
Kalmia CMS 0.2.0 - Info Disclosure
CVSS 5.3
CVE-2025-12994
MEDIUM
Medtronic CareLink Network <December 4, 2025 - Info Disclosure
CVSS 5.3
CVE-2025-66307
MEDIUM
Grav <1.11.0-beta.1 - Info Disclosure
CVSS 6.5
CVE-2025-59116
MEDIUM
Windu CMS <4.1 - Info Disclosure
CVSS 5.3
CVE-2025-25236
MEDIUM
Omnissa Workspace ONE UEM - Info Disclosure
CVSS 5.3
CVE-2025-62236
MEDIUM
Frontier Airlines - Info Disclosure
CVSS 5.3
CVE-2025-34155
Tibbo AggreGate Network Manager < 6.40.05 - Info Disclosure
Details
Vulnerabilities
128