IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is ret
IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensiti
In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed tec
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Au
Nextcloud Desktop is the desktop sync client for Nextcloud. Prior to 3.16.5, when trying to manually lock a file inside
User enumeration vulnerability in M3M Printer Server Web. This issue occurs during user authentication, where a differen
Value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not saniti
A sensitive information disclosure vulnerability exists in the error handling component of ATISoluciones CIGES Applicati
A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of Cryptopp Crypto++ 8.9, allows
A verbose error handling issue in the proxy service implemented in the GravityZone Update Server allows an attacker to c
Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and co
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Prior to 4.0.0, p
.NET Framework Information Disclosure Vulnerability
An issue was discovered in Ollama through 0.3.14. File existence disclosure can occur via api/create. When calling the C
In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status regis
IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a remote attacker to obtain sensitive information when a de
IBM MQ 9.3 LTS and 9.3 CD could allow a remote attacker to obtain sensitive information when a detailed technical error
IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could al
IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive infor
IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive infor
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an insecure cryptographic algori
Signing cookies is an application security feature that adds a digital signature to cookie data to verify its authentici
A flaw was found in the Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the fron
In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix a resource leak in an error
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Fix DSP oops stack dump output contents
The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. Th
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed tec
IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to obtain sensitive informatio
Windows TCP/IP Information Disclosure Vulnerability
Generation of Error Message Containing Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (
Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache To
A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Containing Sens
An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allow
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product responds back with an error me
Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, d
A vulnerability was found in Nway Pro 9. It has been rated as problematic. Affected by this issue is the function ajax_l
An issue in Ametys CMS v4.5.0 and before allows attackers to obtain sensitive information via exposed resources to the e
An issue was discovered in Italtel Embrace 1.6.4. The server does not properly handle application errors. In some cases,
In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed tec
CKAN is an open-source data management system for powering data hubs and data portals. If there were connection issues w
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full Path Disclosure in all
The Remember Me Controls plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including
The Custom Post Limits plugin for WordPress is vulnerable to full path disclosure in all versions up to, and including,
Padding Oracle vulnerability in Apache Druid extension, druid-pac4j. This could allow an attacker to manipulate a pac4j
The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to
Frequently Asked Questions
What is CWE-209?
CWE-209 (CWE-209) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-209?
There are 697 CVE records associated with CWE-209 in our database. Of these, 27 are critical severity, 74 are high severity, and 394 are medium severity.
How can I protect against CWE-209 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-209 using AI-powered security agents.
Detect CWE-209 Vulnerabilities
CyberStrike's AI agents automatically detect cwe-209 vulnerabilities across your infrastructure.
Get Started