CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
333 vulnerabilities with CWE-497
CVE-2025-27369
MEDIUM
IBM OpenPages with Watson 8.3-9.0 - Info Disclosure
CVSS 4.3
CVE-2025-24334
LOW
Nokia Single RAN <23R2-SR 1.0 MP - Info Disclosure
CVSS 3.3
CVE-2025-53211
MEDIUM
Roland Beaussant Audio Editor & Recorder <2.2.3 - Info Disclosure
CVSS 5.3
CVE-2025-6561
CRITICAL
Hunt Electronic Hybrid DVR - Info Disclosure
CVSS 9.8
CVE-2025-49147
MEDIUM
Umbraco <10.8.10, <13.9.1 - Info Disclosure
CVSS 5.3
CVE-2025-5416
LOW
Keycloak - Authenticated Sensitive Information Exposure via Admin Serverinfo Endpoint
CVSS 2.7
CVE-2025-52719
MEDIUM
Metagauss ProfileGrid <5.9.5.2 - Info Disclosure
CVSS 4.3
CVE-2025-4229
MEDIUM
Palo Alto Networks PAN-OS - Info Disclosure
CVE-2025-0036
LOW
AMD Versal Adaptive SoC - Memory Corruption
CVSS 3.2
CVE-2025-31045
HIGH
elfsight Contact Form widget <2.3.1 - Info Disclosure
CVSS 7.5
CVE-2025-5893
CRITICAL
Smart Parking Management System - Info Disclosure
CVSS 9.8
CVE-2025-49419
MEDIUM
Foxit eSign for WordPress <2.0.3 - Info Disclosure
CVSS 5.5
CVE-2025-23969
MEDIUM
whassan KI Live Video Conferences <5.5.15 - Info Disclosure
CVSS 5.3
CVE-2025-24473
LOW
Fortinet FortiClient <7.2.1 - Info Disclosure
CVSS 3.7
CVE-2025-2236
LOW
OpenText Advanced Authentication <6.5 - Info Disclosure
CVE-2025-30170
MEDIUM
ABB ASPECT-Enterprise, NEXUS Series, MATRIX Series <= 3.08.03 - Authenticated Exposure of Sensitive System Information
CVSS 5.5
CVE-2025-4364
HIGH
Fleet Management System < February 6th, 2025 - Unauthenticated Exposure of Sensitive System Information
CVE-2025-39394
MEDIUM
Solid Plugins AnalyticsWP <2.1.2 - Info Disclosure
CVSS 5.3
CVE-2025-32299
MEDIUM
Themovation QuickCal <1.0.15 - Info Disclosure
CVSS 4.3
CVE-2025-31062
MEDIUM
redqteam Wishlist <2.1.0 - Info Disclosure
CVSS 4.3
CVE-2025-48024
MEDIUM
BlueWave Checkmate <2.1 - Info Disclosure
CVSS 5.0
CVE-2025-30011
MEDIUM
SAP Supplier Relationship Management - Info Disclosure
CVSS 5.3
CVE-2025-46747
MEDIUM
User Management < unknown - Info Disclosure
CVSS 5.7
CVE-2025-46718
LOW
sudo-rs < 0.2.6 - Unauthorized Sensitive Information Exposure via -U Flag
CVSS 3.3
CVE-2025-46717
LOW
sudo-rs < 0.2.6 - Unauthorized Sensitive Information Exposure via sudo --list
CVSS 3.3
Details
Vulnerabilities
333