CWE-532

1,137 vulnerabilities with CWE-532

CVE-2025-9985 MEDIUM

Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Sensitive Information Exposure via Publicly Exposed Log Files

CVSS 5.3

CVE-2025-34188 HIGH

Vasion Print Virtual Appliance Host <1.0.735 & Application <20.0.1330 - Cleartext Session Token Exposure

CVSS 7.8

CVE-2025-34183 HIGH

Ilevia EVE X1 Server <= 4.7.18.0.eden - Unauthenticated Credential Exposure via Log File Disclosure

CVSS 7.5

CVE-2025-43354 MEDIUM

Apple VisionOS <26 - Info Disclosure

CVSS 5.5

CVE-2025-43303 MEDIUM

Apple VisionOS <26 - Info Disclosure

CVSS 5.5

CVE-2025-4234 LOW

Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack - Info Di...

CVE-2025-54376 HIGH

Hoverfly < 1.12.0 - Unauthenticated Sensitive Information Exposure via Admin WebSocket Endpoint

CVSS 7.5

CVE-2025-43888 HIGH

Dell PowerProtect Data Manager < 19.21 - Insertion of Sensitive Information into Log File

CVSS 8.8

CVE-2025-10221 MEDIUM

AxxonSoft Axxon One < 2.0.4 - Sensitive Information Exposure in ARP Agent Log Files

CVSS 5.5

CVE-2025-7445 MEDIUM

Kubernetes secrets-store-sync-controller <0.0.2 - Info Disclosure

CVSS 6.5

CVE-2025-23261 MEDIUM

NVIDIA Cumulus Linux/NVOS - Info Disclosure

CVSS 5.5

CVE-2025-8663 MEDIUM

upKeeper Manager 5.0.0-5.2.11 - Sensitive Information Disclosure in Log Files

CVSS 6.5

CVE-2025-41690 HIGH

Endress+Hauser Promag 10 and Promass 10 - Unauthenticated Sensitive Information Exposure via Event Log

CVSS 7.4

CVE-2025-36133 MEDIUM

IBM App Connect Enterprise 9.2.0-11.6.0, 12.0.0-12.0.14, 12.1.0-12.14.0 - Sensitive Information Exposure

CVSS 5.9

CVE-2025-57813 MEDIUM

traQ < 3.25.0 - Sensitive Information Disclosure in SQL Error Logs

CVSS 5.9

CVE-2025-3456 LOW

Arista EOS 4.29.0-4.34.0F - Sensitive Information Disclosure in Log Files

CVSS 3.8

CVE-2025-7426 CRITICAL

MINOVA TTA - Unauthenticated Exposure of FTP Credentials via Debug Port

CVE-2025-55285 LOW

@backstage/plugin-scaffolder-backend <2.1.1 - Info Disclosure

CVSS 2.6

CVE-2025-38745 MEDIUM

Dell OpenManage Enterprise 3.10, 4.0, 4.1, 4.2 - Sensitive Information Exposure via Backup and Restore Log

CVSS 4.8

CVE-2025-24520 LOW

Intel(R) Local Manageability Service <2514.7.16.0 - Info Disclosure

CVSS 3.3

CVE-2025-42935 MEDIUM

SAP NetWeaver Application Server ABAP - Info Disclosure

CVSS 4.1

CVE-2025-8864 MEDIUM

Shared Access Signature token exposure - Info Disclosure

CVE-2025-48709 LOW

BMC Control-M/Server 9.0.21.300 - Info Disclosure

CVSS 3.8

CVE-2025-54781 LOW

Himmelblau <1.1.0 - Info Disclosure

CVSS 2.8

CVE-2025-23289 MEDIUM

NVIDIA Omniverse Launcher - Info Disclosure

CVSS 5.5