Fallos del tipo CWE-200

3928 resultados
CVE-2025-46552MEDIUMKHC-INVITATION-AUTOMATION Sensitive User Information Leakage in Invitation AutomationEPSS 0.3%CVE-2023-5579LOWyhz66 Sandbox User Data information disclosureEPSS 0.3%CVE-2025-54290MEDIUMProject Existence Disclosure via Error Handling in LXD Image ExportEPSS 0.3%CVE-2026-32631HIGHGit for Windows: `git clone` from manipulated repositories can leak NTLM hashes to arbitrary serversEPSS 0.3%CVE-2024-12538MEDIUMDuplicate Post, Page and Any Custom Post <= 3.5.5 - Authenticated (Contributor+) Post Disclosure via Post DuplicationEPSS 0.3%CVE-2026-8766MEDIUMKilo-Org kilocode Environment Variable config.ts load information disclosureEPSS 0.3%CVE-2025-5184MEDIUMSummer Pearl Group Vacation Rental Management Platform HTTP Response Header information disclosureEPSS 0.3%CVE-2026-28276HIGHInitiative Allows Unauthenticated Access to Uploaded Documents via Public /uploads/ EndpointEPSS 0.3%CVE-2026-3058MEDIUMSeraphinite Accelerator <= 2.28.14 - Authenticated (Subscriber+) Exposure of Sensitive Information to an Unauthorized ActorEPSS 0.3%CVE-2025-23215CRITICALPMD Designer's release key passphrase (GPG) available on Maven Central in cleartextEPSS 0.3%CVE-2025-53512MEDIUMSensitive log retrieval in JujuEPSS 0.3%CVE-2026-32002MEDIUMOpenClaw < 2026.2.23 - Sandbox Boundary Bypass via Image Tool workspaceOnly BypassEPSS 0.3%CVE-2025-13526HIGHOneClick Chat to Order <= 1.0.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information ExposureEPSS 0.3%CVE-2023-43814LOWExposure of poll options and votes to unauthorized users in DiscourseEPSS 0.3%CVE-2025-40645HIGHExposure of sensitive information in VidayEPSS 0.3%CVE-2025-59454MEDIUMApache CloudStack: Lack of user permission validation leading to data leak for few APIsEPSS 0.3%CVE-2024-27362MEDIUMA vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exynos 2400 where they dEPSS 0.3%CVE-2023-50346LOWAn information disclosure affects DRYiCE MyXalyticsEPSS 0.3%CVE-2026-35413MEDIUMDirectus GraphQL Schema SDL Disclosure SettingEPSS 0.3%CVE-2025-69226MEDIUMAIOHTTP allows for a brute-force leak of internal static filepath componentsEPSS 0.3%