CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
333 vulnerabilities with CWE-497
CVE-2025-4235
HIGH
Palo Alto Networks User-ID Credential Agent - Info Disclosure
CVE-2025-10264
CRITICAL
Digiever Multiple Models < *.*.*.78 - Unauthenticated Sensitive Information Exposure
CVSS 10.0
CVE-2025-6769
MEDIUM
GitLab CE/EE <18.1.6-18.3.2 - Info Disclosure
CVSS 4.3
CVE-2025-9364
HIGH
FactoryTalk Analytics LogixAI - Exposure of Sensitive System Information via Over-Permissive Redis Instance
CVSS 8.8
CVE-2025-58866
LOW
Rami Yushuvaev Site Info <1.1 - Info Disclosure
CVSS 2.7
CVE-2025-58797
MEDIUM
Ninja Charts <3.3.2 - Info Disclosure
CVSS 5.3
CVE-2025-2667
LOW
IBM Sterling B2B Integrator <6.2.0.5 - Info Disclosure
CVSS 2.7
CVE-2025-36162
MEDIUM
IBM DevOps Deploy/UCD <8.1.2.2 - Info Disclosure
CVSS 4.3
CVE-2025-8700
MEDIUM
Invoice Ninja - Privilege Escalation
CVE-2025-8597
MEDIUM
MacVim < r181.2 - Unauthorized Debugger Attachment and Memory Access via get-task-allow Entitlement
CVE-2025-57888
MEDIUM
NooTheme Jobmonster <4.8.0 - Info Disclosure
CVSS 5.3
CVE-2025-27721
HIGH
INFINITT PACS System Manager - Info Disclosure
CVSS 7.5
CVE-2025-48355
MEDIUM
ProveSource Social Proof <3.0.5 - Info Disclosure
CVSS 5.3
CVE-2025-2988
LOW
IBM Sterling B2B Integrator & File Gateway <6.2.1 - Info Disclosure
CVSS 2.7
CVE-2025-54736
MEDIUM
NordicMade Savoy <3.0.8 - Info Disclosure
CVSS 5.3
CVE-2025-23288
LOW
NVIDIA GPU Display Driver - Info Disclosure
CVSS 3.3
CVE-2025-23287
LOW
NVIDIA GPU Display Driver - Info Disclosure
CVSS 3.3
CVE-2025-54422
MEDIUM
Sandboxie < 1.16.2 - Insufficiently Protected Credentials via Shared Memory and Command-Line Arguments
CVSS 5.5
CVE-2025-53031
MEDIUM
Oracle Financial Services Analytical Applications Infrastructure <8...
CVSS 5.3
CVE-2025-53862
LOW
Ansible Automation Platform - Unauthenticated Exposure of Sensitive System Information via API Endpoints
CVSS 3.5
CVE-2025-6390
MEDIUM
Brocade SANnav <2.4.0a - Info Disclosure
CVSS 4.4
CVE-2025-4662
MEDIUM
Brocade SANnav <2.4.0a - Info Disclosure
CVSS 4.4
CVE-2025-53364
MEDIUM
Parse Server <7.5.3-8.2.2 - Info Disclosure
CVSS 5.3
CVE-2025-7381
MEDIUM
Docker Mautic <=6.0.3/5.2.7 PHP Version Exposure via X-Powered-By Header
CVSS 5.3
CVE-2025-2670
MEDIUM
IBM OpenPages 9.0 - Info Disclosure
CVSS 4.3
Details
Vulnerabilities
333