CWE-209
High likelihoodGeneration of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
561 vulnerabilities with CWE-209
CVE-2023-1210
LOW
GitLab 12.9-16.0.8 16.1-16.1.3 16.2-16.2.2 - Email Leak via Error Message
CVSS 3.1
CVE-2023-31429
MEDIUM
Brocade Fabric OS <9.1.1c-9.2.0 - Info Disclosure
CVSS 5.5
CVE-2023-20593
MEDIUM
Xen - Information Disclosure via Zen 2 CPU Microarchitectural Side Channel
CVSS 5.5
CVE-2023-25948
HIGH
Honeywell Experion Server 501.1-501.6hf8 - Information Disclosure via Error Message
CVSS 7.5
CVE-2023-3362
MEDIUM
GitLab CE/EE <16.0.6 & 16.1.0 - Info Disclosure
CVSS 5.3
CVE-2023-37260
HIGH
league/oauth2-server 8.3.2-8.5.3 - Sensitive Information Exposure in CryptKey Error Message
CVSS 8.2
CVE-2023-37306
HIGH
MISP 2.4.172 - Sensitive Information Exposure via Certificate File Extension Error Messages
CVSS 7.5
CVE-2023-34110
LOW
Flask-AppBuilder <4.3.2 - Info Disclosure
CVSS 2.7
CVE-2023-34339
LOW
JetBrains Ktor < 2.3.1 - Sensitive Information Exposure via Exception Message
CVSS 3.3
CVE-2023-33181
MEDIUM
Xibo 3.0.0-3.3.4 - Information Disclosure via API Error Stack Trace
CVSS 4.3
CVE-2023-28514
MEDIUM
IBM MQ 8.0, 9.0, and 9.1 - Sensitive Credential Exposure via Error Message
CVSS 6.2
CVE-2023-21103
MEDIUM
Android - Local Denial of Service via PhoneAccountRegistrar Uncaught Exception
CVSS 5.5
CVE-2023-27860
MEDIUM
IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 - Sensitive Information Disclosure in Error Message
CVSS 5.3
CVE-2023-31286
MEDIUM
Serenity Serene <6.7.0 - Info Disclosure
CVSS 5.3
CVE-2023-23837
HIGH
No Exception Handling - Info Disclosure
CVSS 7.5
CVE-2023-29193
HIGH
spicedb < 1.19.1 - Sensitive Information Exposure via Debug Endpoint
CVSS 8.7
CVE-2023-28117
HIGH
Sentry SDK < 1.14.0 - Sensitive Cookie Value Leak via Django Integration
CVSS 7.6
CVE-2023-25687
MEDIUM
IBM Security Guardium Key Lifecycle Manager 3.0-4.1.1 Sensitive Info Exposure via Log Files
CVSS 4.3
CVE-2023-25695
MEDIUM
Apache Airflow < 2.5.2 - Sensitive Information Exposure via Error Message
CVSS 5.3
CVE-2023-27587
HIGH
readtomyshoe < 2023-03-13 - Sensitive Information Exposure via Google Cloud TTS Error Message
CVSS 7.4
CVE-2023-26052
LOW
Saleor 2.0.0-3.1.47 - Unauthenticated Sensitive Information Exposure via Error Messages
CVSS 3.7
CVE-2023-26051
MEDIUM
Saleor 2.0.0-3.1.47 - Authenticated Sensitive Information Exposure via Error Messages
CVSS 6.5
CVE-2023-25956
HIGH
Apache Airflow AWS Provider < 7.2.1 - Sensitive Information Exposure via Error Message
CVSS 7.5
CVE-2023-0655
MEDIUM
SonicWall Email Security < 10.0.19.7431 - Unauthenticated Sensitive Information Exposure via Error Page
CVSS 5.3
CVE-2023-22626
HIGH
PgHero < 3.1.0 - Information Disclosure via EXPLAIN Error Message
CVSS 7.5
Details
Vulnerabilities
561
Exploit Likelihood
High