CWE-359
Exposure of Private Personal Information to an Unauthorized Actor
The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.
184 vulnerabilities with CWE-359
CVE-2025-53950
MEDIUM
Fortinet FortiDLP Agent - Info Disclosure
CVSS 5.5
CVE-2025-62362
MEDIUM
gpp-burgerportaal <2.0.3, <3.0.2, <4.0.1 - Info Disclosure
CVE-2025-5009
LOW
Google Gemini iOS - Unauthorized Exposure of Private Conversation History via Public Link Sharing
CVE-2025-10859
MEDIUM
Firefox for iOS < 143.1 - Info Disclosure
CVSS 4.0
CVE-2025-59843
MEDIUM
Flag Forge <2.3.2 - Info Disclosure
CVSS 5.3
CVE-2025-43357
LOW
iPadOS < 26.0 - Unprotected User Data Exposure via Fingerprinting
CVSS 3.3
CVE-2025-43310
MEDIUM
macOS < 14.8, < 15.7, < 26 - Unprotected User Data Exposure via Pasteboard
CVSS 4.4
CVE-2025-43301
LOW
macOS Sonoma <14.8 - Info Disclosure
CVSS 3.3
CVE-2025-43279
MEDIUM
macOS < 26.0 - Unprotected User Data Exposure via Log Entry Redaction
CVSS 6.2
CVE-2025-51586
LOW
PrestaShop <8.2.1 - Info Disclosure
CVSS 3.7
CVE-2025-41685
MEDIUM
SMA ennexos.sunnyportal.com < 15.08.2025 - Unauthorized Exposure of Private Personal Information via Email Address
CVSS 6.5
CVE-2025-53765
MEDIUM
Azure App Service on Azure Stack < 102.10.2.11 - Unauthorized Exposure of Private Personal Information
CVSS 4.4
CVE-2025-54125
MEDIUM
XWiki Platform <17.1.0 - Info Disclosure
CVSS 6.5
CVE-2025-54124
MEDIUM
XWiki Platform <17.1.0 - Info Disclosure
CVSS 6.5
CVE-2025-43259
MEDIUM
macOS <15.6-13.7.7 - Info Disclosure
CVSS 4.6
CVE-2025-43227
HIGH
Safari < 18.6 - Unauthorized Exposure of Private Personal Information via Malicious Web Content
CVSS 7.5
CVE-2025-43217
MEDIUM
iPadOS < 17.7.9 and < 18.6 - Unauthorized Exposure of Privacy Indicators
CVSS 4.0
CVE-2025-31276
MEDIUM
iPadOS < 17.7.9 and < 18.6 - Unauthorized Remote Content Loading via Load Remote Images Setting Bypass
CVSS 5.3
CVE-2025-53625
HIGH
DynamicPageList3 < 3.6.4 - Exposure of Hidden Usernames via DPL Parameters
CVE-2025-53374
MEDIUM
dokploy < 0.23.7 - Authenticated Exposure of Private Personal Information via user.one Endpoint
CVSS 4.3
CVE-2025-6017
MEDIUM
Red Hat Advanced Cluster Management <2.10.7-2.12.4 - Info Disclosure
CVSS 5.5
CVE-2025-49715
HIGH
Dynamics 365 FastTrack Implementation Assets - Info Disclosure
CVSS 7.5
CVE-2025-49134
MEDIUM
Weblate < 5.12 - Unauthorized Exposure of User IP Address in Audit Log Notifications
CVSS 5.3
CVE-2025-5334
HIGH
Devolutions Remote Desktop Manager < 2025.1.34.0 - Unauthorized Access to Private Information via User Vaults
CVSS 7.5
CVE-2025-0679
MEDIUM
GitLab CE/EE <17.10.7-18.0.1 - Info Disclosure
CVSS 4.3
Details
Vulnerabilities
184