Fallos del tipo CWE-200
3928 resultadosCVE-2025-63212MEDIUMGatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifieEPSS 0.3%CVE-2025-12408MEDIUMEvents Manager <= 7.2.2.2 - Unauthenticated Information ExposureEPSS 0.3%CVE-2025-69226MEDIUMAIOHTTP allows for a brute-force leak of internal static filepath componentsEPSS 0.3%CVE-2026-0888MEDIUMInformation disclosure in the XML componentEPSS 0.3%CVE-2023-48644MEDIUMAn issue was discovered in the Archibus app 4.0.3 for iOS. There is an XSS vulnerability in the create work request feature of the maintenanEPSS 0.3%CVE-2024-42493MEDIUMDorsett Controls InfoScan Exposure of Sensitive Information To An Unauthorized ActorEPSS 0.3%CVE-2025-36759HIGHSensitive Information Disclosure in SolaX CloudEPSS 0.3%CVE-2026-4126MEDIUMTable Manager <= 1.0.0 - Authenticated (Contributor+) Sensitive Information Exposure via 'table' Shortcode AttributeEPSS 0.3%CVE-2024-7091MEDIUMExposure of Sensitive Information to an Unauthorized Actor in GitLabEPSS 0.3%CVE-2024-41733MEDIUMInformation Disclosure Vulnerability in SAP CommerceEPSS 0.3%CVE-2021-0212MEDIUMContrail Networking: Administrator credentials are exposed in a plaintext fileEPSS 0.3%CVE-2025-23174HIGHYoel Geva - CWE-200: Exposure of Sensitive Information to an Unauthorized ActorEPSS 0.3%CVE-2025-31964LOWHCL BigFix IVR is impacted by an improper service binding configurationEPSS 0.3%CVE-2025-11145HIGHUser Enumeration in CBK Soft's enVisionEPSS 0.3%CVE-2026-44206MEDIUMFrappe: DB Schema Enumeration via Frappe-Authorization-SourceEPSS 0.3%CVE-2026-40885HIGHgoshs: Public collaborator feed leaks .goshs ACL credentials and enables unauthorized accessEPSS 0.3%CVE-2025-39204HIGHA vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering query in the Web interface can be malformed, sEPSS 0.3%CVE-2023-49774MEDIUMWordPress WP Photo Album Plus plugin <= 8.5.02.005 - IP Bypass vulnerabilityEPSS 0.3%CVE-2024-40798LOWThis issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS MonterEPSS 0.3%CVE-2025-58581MEDIUMInformation Disclosure Through Stacktrace-/MQTT/Config/changeAllEPSS 0.3%