Fallos del tipo CWE-200

3910 resultados
CVE-2023-0614HIGHThe fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacEPSS 0.6%CVE-2023-38729MEDIUMIBM Db2 information disclosureEPSS 0.6%CVE-2024-47771HIGHElement Desktop vulnerable to potential exposure of access token via authenticated mediaEPSS 0.6%CVE-2022-46257Information disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository namesEPSS 0.6%CVE-2023-24959MEDIUMIBM InfoSphere Information Server information disclosureEPSS 0.6%CVE-2025-53640MEDIUMIndico vulnerable to user enumeration via API endpointEPSS 0.6%CVE-2023-36472MEDIUMStrapi may leak sensitive user information, user reset password, tokens via content-manager viewsEPSS 0.6%CVE-2023-33174MEDIUMWindows Cryptographic Information Disclosure VulnerabilityEPSS 0.6%CVE-2024-2541MEDIUMPopup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV FileEPSS 0.6%CVE-2022-35169SAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker with an admin privilege to read and decryptEPSS 0.6%CVE-2023-40580HIGHFreighter mnemonic phrase may be accessed by Javascript through a private APIEPSS 0.6%CVE-2021-44534MEDIUMInsufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive information disclosEPSS 0.6%CVE-2023-22086HIGHVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected areEPSS 0.6%CVE-2022-28224MEDIUMCalico and Calico Enterprise may be vulnerable to route hijacking with the floating IP featureEPSS 0.6%CVE-2024-1255MEDIUMsepidz SepidzDigitalMenu Waiters information disclosureEPSS 0.6%CVE-2017-9369LOWIn BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an information disclosure vulnerability in the defaulEPSS 0.6%CVE-2022-3460HIGHIn affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become unmasked when viewed EPSS 0.6%CVE-2024-25118MEDIUMInformation Disclosure of Hashed Passwords in TYPO3 Backend FormsEPSS 0.6%CVE-2026-41323HIGHKyverno: ServiceAccount token leaked to external servers via apiCall service URLEPSS 0.6%CVE-2022-23726MEDIUMPingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amoEPSS 0.6%