CWE-200
11,867 CVEs • Abstraction: Class • Likelihood of Exploit: High
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CVEs (11,867)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Noderequest Project 1Noderequest Nov 21, 2024 Jun 7, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
1Nodemailer.js Project 1Nodemailer.js Nov 21, 2024 Jun 7, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
1Nodemailer Js Project 1Nodemailer Js Nov 21, 2024 Jun 7, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
1Nodeffmpeg Project 1Nodeffmpeg Nov 21, 2024 Jun 7, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 nodeffmpeg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
1Node Opencv Project 1Node Opencv Nov 21, 2024 Jun 7, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
1Openssl.js Project 1Openssl.js Nov 21, 2024 Jun 7, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
1Node Openssl Project 1Node Openssl Nov 21, 2024 Jun 7, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
1Node Opensl Project 1Node Opensl Nov 21, 2024 Jun 7, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 node-opensl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
1Mssql Node Project 1Mssql Node Nov 21, 2024 Jun 7, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 mssql-node was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
mssql.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal article information of their customer tickets. |
1Ibm 3Security Access Manager Security Access Manager For MobileSecurity Access Manager For WebNov 21, 2024 Jun 6, 2018 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport...Show more |
1Ibm 3Security Access Manager Security Access Manager For MobileSecurity Access Manager For WebNov 21, 2024 Jun 6, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM...Show more |
A exposure of sensitive information vulnerability exists in Jenkins Gitlab Hook Plugin 1.4.2 and older in gitlab_notifier.rb, views/gitlab_notifier/global.erb that allows attackers with local Jenkins master file system a...Show more |