CWE-497
443 CVEs • Abstraction: Base
Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
CVEs (443)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container. |
Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) for WooCommerce <= 2.1.5 versions. |
phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that allows remote attackers to access the full contents of the uploaded-files database table by visiting any page of the applicat...Show more |
Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1.1.6 versions. |
Unauthenticated Sensitive Data Exposure in WCBoost – Products Compare <= 1.1.0 versions. |
Subscriber Sensitive Data Exposure in GetGenie <= 4.4.2 versions. |
Unauthenticated Sensitive Data Exposure in Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 versions. |
Unauthenticated Sensitive Data Exposure in Ads by WPQuads <= 3.0.3 versions. |
A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauth...Show more |
Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce <= 2.0 versions. |
Subscriber Sensitive Data Exposure in Coupon Affiliates <= 7.8.1 versions. |
Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway <= 6.0.0 versions. |
Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.9.4 versions. |
Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.4.1 versions. |
Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions. |
Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions. |
Unauthenticated Sensitive Data Exposure in IDPay Payment Gateway for Woocommerce <= 2.2.5 versions. |
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HashThemes Hash Elements allows Retrieve Embedded Sensitive Data.
This issue affects Hash Elements: from n/a through 1.5.4. |
Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service. |
Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP Business Objects application leaks sensitive information .This has a low impact on the confidentiality of the data. There is no im...Show more |