Weaknesses of type CWE-497
334 resultsCVE-2025-30686HIGHVulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: EMC). Supported versions thatEPSS 0.5%CVE-2024-8550HIGHLocal File Inclusion (LFI) in modelscope/agentscopeEPSS 0.5%CVE-2025-32255MEDIUMWordPress StaffList plugin <= 3.2.7 - Sensitive Data Exposure vulnerabilityEPSS 0.5%CVE-2025-32251MEDIUMWordPress Jetpack Feedback Exporter plugin <= 1.23 - Sensitive Data Exposure VulnerabilityEPSS 0.5%CVE-2025-6561CRITICALHunt Electronic Hybrid DVR - Exposure of Sensitive System InformationEPSS 0.5%CVE-2025-46421MEDIUMLibsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a serverEPSS 0.5%CVE-2025-1144CRITICALQuanxun School Affairs System - Exposure of Sensitive InformationEPSS 0.5%CVE-2024-37526MEDIUMIBM Watson Query on Cloud Pak for Data information disclosureEPSS 0.5%CVE-2023-4605MEDIUM
A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoint to retrieve systemEPSS 0.5%CVE-2024-54279HIGHWordPress WP-NERD Toolkit plugin <= 1.1 - Sensitive Data Exposure vulnerabilityEPSS 0.5%CVE-2022-2403—A credentials leak was found in the OpenShift Container Platform. The private key for the external cluster certificate was stored incorrectlEPSS 0.5%CVE-2025-10264CRITICALDigiever｜NVR - Exposure of Sensitive InformationEPSS 0.4%CVE-2025-24473MEDIUMA exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.EPSS 0.4%CVE-2023-32550CRITICALLandscape's Apache server-status is accessible by defaultEPSS 0.4%CVE-2024-50528HIGHWordPress Stacks Mobile App Builder plugin <= 5.2.3 - Sensitive Data Exposure vulnerabilityEPSS 0.4%CVE-2025-32792HIGHses's global contour bindings leak into Compartment lexical scopeEPSS 0.4%CVE-2024-53814MEDIUMWordPress Analytify plugin <= 5.4.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-31832MEDIUMWordPress ACF City Selector plugin <= 1.17.0 - Sensitive Data Exposure vulnerabilityEPSS 0.4%CVE-2024-6389MEDIUMExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLabEPSS 0.4%CVE-2023-34209MEDIUMExposure of Sensitive System Information to an Unauthorized Control Sphere in EasyUse MailHunter UltimateEPSS 0.4%