CWE-200
11,867 CVEs • Abstraction: Class • Likelihood of Exploit: High
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CVEs (11,867)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Philips 18Avalon Fetal/maternal Monitors Fm20 Firmware Avalon Fetal/maternal Monitors Fm30 FirmwareAvalon Fetal/maternal Monitors Fm40 Firmware+15 moreNov 21, 2024 Jun 5, 2018 N/A· v4 5.3 MEDIUM· v3 2.9 LOW· v2 IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Maternal Monitors FM20/FM...Show more |
A exposure of sensitive information vulnerability exists in Jenkins Black Duck Detect Plugin 1.4.0 and older in DetectPostBuildStepDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-...Show more |
A exposure of sensitive information vulnerability exists in Jenkins Black Duck Hub Plugin 4.0.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified...Show more |
A exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.7.0 and older in ContainerExecDecorator.java that results in sensitive variables such as passwords being written to logs. |
1Jenkins 1Github Pull Request Builder Nov 21, 2024 Jun 5, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin 1.41.0 and older in GhprbGitHubAuth.java that allows attackers with Overall/Read access to connect to an attacker-spe...Show more |
A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubServerConfig.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using a...Show more |
Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that could allow a user to impersonate another user when communicating with some Storm Daemons. |
Kitura 2.3.0 and earlier have an unintended read access to unauthorised files and folders that can be exploited by a crafted URL resulting in information disclosure. |
The forgotten-password feature in index.php/member/reset/reset_email.html in YzmCMS v3.2 through v3.7 has a Response Discrepancy Information Exposure issue and an unexpectedly long lifetime for a verification code, which...Show more |
1Rockwellautomation 1Micrologix 1400 B Firmware Nov 21, 2024 Jun 4, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a file write resulting in a new progra...Show more |
`sqlserver` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
1Nodefabric Project 1Nodefabric Nov 21, 2024 Jun 4, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 `nodefabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
`fabric-js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
1Node Fabric Project 1Node Fabric Nov 21, 2024 Jun 4, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 `node-fabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
`sqliter` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
`sqlite.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
1Nodesqlite Project 1Nodesqlite Nov 21, 2024 Jun 4, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 `nodesqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
1Node Sqlite Project 1Node Sqlite Nov 21, 2024 Jun 4, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 `node-sqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
`jquery.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |
`d3.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. |