Fallos del tipo CWE-200

3916 resultados
CVE-2023-48957MEDIUMPureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to EPSS 0.4%CVE-2024-21685HIGHThis High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Core Data Center. EPSS 0.4%CVE-2023-25169LOWYearly Review Plugin leaking anonymised users data in discourse-yearly-reviewEPSS 0.4%CVE-2024-5614MEDIUMPiotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information ExposureEPSS 0.4%CVE-2024-6499MEDIUMWordPress Button Plugin MaxButtons <= 9.7.8 - Full Path DisclosureEPSS 0.4%CVE-2024-6573MEDIUMIntelligence <= 1.4.0 - Unauthenticated Full Path DisclosureEPSS 0.4%CVE-2024-11290MEDIUMMember Access <= 1.1.6 - Unauthenticated Content Restriction Bypass to Sensitive Information ExposureEPSS 0.4%CVE-2024-6557MEDIUMSchedulePress <= 5.1.3 - Unauthenticated Full Path DisclosureEPSS 0.4%CVE-2024-6547MEDIUMAdd Admin CSS <= 2.0.1 - Unauthenticated Full Path DislcosureEPSS 0.4%CVE-2022-39358MEDIUMMetabase vulnerable to circumvention of Locked parameter in Signed EmbeddingEPSS 0.4%CVE-2024-7415MEDIUMRemember Me Controls <= 2.0.1 - Unauthenticated Full Path DisclosureEPSS 0.4%CVE-2024-7411MEDIUMNewsletters <= 4.9.9 - Unauthenticated Full Path DisclosureEPSS 0.4%CVE-2024-11090MEDIUMMembership Plugin – Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information ExposureEPSS 0.4%CVE-2024-6552MEDIUMBooking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path DisclosureEPSS 0.4%CVE-2023-35900MEDIUMIBM Robotic Process Automation information disclosureEPSS 0.4%CVE-2024-35223MEDIUMDapr API Token ExposureEPSS 0.4%CVE-2024-13638MEDIUMOrder Attachments for WooCommerce <= 2.5.1 - Unauthenticated Sensitive Information Exposure Through Unprotected DirectoryEPSS 0.4%CVE-2024-22002HIGHCORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdirectory of the instaEPSS 0.4%CVE-2023-23628MEDIUMMetabase subject to Exposure of Sensitive Information to an Unauthorized Actor EPSS 0.4%CVE-2026-14161HIGHAdvantech｜Hospital Queuing Management - Sensitive Data ExposureEPSS 0.4%