CWE-200

The "tokenKey" value used in user authorization is visible in the HTML source of the login page.

Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability ma

Vite is a frontend tooling framework for javascript. The Vite dev server option `server.fs.deny` can be bypassed on case

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SNP Digital SalesKing.This issue affects Sal

Lemmy is a link aggregator and forum for the fediverse. Starting in version 0.17.0 and prior to version 0.19.1, users ca

In the module "Mailjet" (mailjet) from Mailjet for PrestaShop before versions 3.5.1, a guest can download technical info

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr.This issue affects Apache Solr:

An issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX thread that uses OpenSSL exi

Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulner

kedi ElectronCord is a bot management tool for Discord. Commit aaaeaf4e6c99893827b2eea4dd02f755e1e24041 exposes an accou

In the module "Survey TMA" (ecomiz_survey_tma) up to version 2.0.0 from Ecomiz for PrestaShop, a guest can download pers

An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially

Couchbase Server before 7.2.4 has a private key leak in goxdcr.log.

An issue was discovered in Webbax "Super Newsletter" (supernewsletter) module for PrestaShop versions 1.4.21 and before,

CasaOS-UserService provides user management functionalities to CasaOS. Prior to version 0.4.7, path filtering of the URL

An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear C

An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the pr

A Information Exposure Vulnerability has been found on Meta4 HR. This vulnerability allows an attacker to obtain a lot o

A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensiti

Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/ins

Directory Traversal vulnerability in Yealink VP59 v.91.15.0.118 allows a physically proximate attacker to obtain sensiti

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only a

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information wi

An information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive inform

In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check.

Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect se

In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the

In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the

The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, SSL Score plugin for WordPress

An issue in ZKTeco BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information.

An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter.

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr

In scrapy version 2.10.1, an issue was identified where the Authorization header, containing credentials for server auth

The API in Accredible Credential.net December 6th, 2023 allows an Insecure Direct Object Reference attack that discloses

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AitThemes Citadela Listing.This issue affect

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versi

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts LOV). Supported

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in vinoth06. Frontend Dashboard.This issue affe

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeHigh Email Customizer for WooCommerce.T

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid.This issue affects Pos

An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to obtain sens

An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information via the content.js and

An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information due to missing support

An issue in Vaales Technologies V_QRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Mode

An issue in CYCZCAM, SHIX ZHAO, SHIXCAM A9 Camera (circuit board identifier A9-48B-V1.0) firmware v.CYCAM_48B_BC01_v87_0

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all