CWE-359

The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated u

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Ap

AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details thr

Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Versions prior to 20.8.9

Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unau

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vul

Joomla! Component JoomProject 1.1.3.2 contains an information disclosure vulnerability that allows unauthenticated attac

A flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL` error messages. Wh

phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that allows remote attackers t

9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability that allows remote attack

XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Sta

Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, T

Exposure of private personal information to an unauthorized actor, Insufficiently Protected Credentials vulnerability in

Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized a

Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized a

Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disc

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized

The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated u

Hi.Events through 1.9.0 public check-in list endpoints use short_id as sole access control, allowing unauthenticated acc

Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Ap

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4. An app may be

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Since there are input fields

SAP Commerce Cloud exposes multiple API endpoints to unauthenticated users, allowing them to submit requests to these op

Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10,

LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to version 0.5.19 of the JavaScri

HelloTalk through 3.4.1 stores full-precision GPS coordinates even when the user had intended to share only a country or

CrossWatch (CW) is a synchronization engine. Prior to version 0.9.21, GET /api/app-auth/status is accessible without aut

Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to

Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.5 and iPadOS 26.5. An attac

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, GET /api/v4/user/search calls SearchActi

GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on pu

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6 before 18.6.3, and 1

Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially w

A flaw was found in Keycloak. An authenticated user with the view-users role could exploit a vulnerability in the UserRe

In Crazy Bubble Tea mobile application authenticated attacker can obtain personal information about other users by enume

In mObywatel iOS application an unauthorized user can use the App Switcher to view the account owner's personal informat

A user with physical access to a smartphone can bypass authentication mechanism of Kidsview mobile application and grant

Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19,