Weaknesses of type CWE-200

3,933 results
CVE-2026-33220MEDIUMWeblate: JavaScript localization CDN add-on allows arbitrary local file read outside the repositoryEPSS 0.3%CVE-2026-28920MEDIUMAn information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26EPSS 0.3%CVE-2019-5641LOWRapid7 InsightVM Information Disclosure after LogoutEPSS 0.3%CVE-2024-58256MEDIUMEnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution.EPSS 0.3%CVE-2025-14464MEDIUMPDF Resume Parser <= 1.0 - Unauthenticated Sensitive Information Disclosure in SMTP CredentialsEPSS 0.3%CVE-2025-59833HIGHFlagForgeCTF Hint Exposure via APIEPSS 0.3%CVE-2026-45300HIGHasync-http-client: Cookie header not stripped on cross-origin redirectEPSS 0.3%CVE-2025-13785MEDIUMyungifez Skuul School Management System Image profile information disclosureEPSS 0.3%CVE-2026-28492HIGHFile Browser: Path Traversal in Public Share Links Exposes Files Outside Shared DirectoryEPSS 0.3%CVE-2025-29489MEDIUMlibming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHLINESTYLES function.EPSS 0.3%CVE-2025-5064MEDIUMInappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin EPSS 0.3%CVE-2025-29488MEDIUMlibming v0.4.8 was discovered to contain a memory leak via the parseSWF_INITACTION function.EPSS 0.3%CVE-2026-28922MEDIUMThis issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26EPSS 0.3%CVE-2025-8852MEDIUMWuKongOpenSource WukongCRM API Response upload information exposureEPSS 0.3%CVE-2025-59535MEDIUMDotNetNuke.Core allows loading of unused themes on anonymous clients through query parametersEPSS 0.3%CVE-2023-52147LOWWordPress All-In-One Security (AIOS) plugin <= 5.2.4 - Secret Login Page Location Disclosure on Multisites vulnerabilityEPSS 0.3%CVE-2025-29497MEDIUMlibming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHFILLSTYLES function.EPSS 0.3%CVE-2026-36719HIGHAn information disclosure vulnerability in the /api/v1/user/info endpoint of AgentChat v2.3.0 allows unauthenticated attackers to obtain senEPSS 0.3%CVE-2025-49150MEDIUMCursor Agent Potentially Leaks Information using JSON schemaEPSS 0.3%CVE-2025-14980MEDIUMBetterDocs <= 4.3.3 - Authenticated (Contributor+) Sensitive Information ExposureEPSS 0.3%