Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-200 (信息暴露) — Vulnerability Class 2723

2723 vulnerabilities classified as CWE-200 (信息暴露). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2026-20027 Cisco Snort DCERPC Stub Data Out of Bounds Read — Cisco Secure Firewall Threat Defense (FTD) Software 5.3 Medium2026-01-07
CVE-2025-12540 ShareThis Dashboard for Google Analytics <= 3.2.4 - Unauthenticated Google Analytics Data Exposure — ShareThis Dashboard for Google Analytics 4.7 Medium2026-01-07
CVE-2025-31964 HCL BigFix IVR is impacted by an improper service binding configuration — BigFix IVR 2.2 Low2026-01-07
CVE-2025-13371 Money Space <= 2.13.9 - Unauthenticated Sensitive Information Exposure — Money Space 8.6 High2026-01-07
CVE-2025-47369 Information Exposure in Computer Vision — Snapdragon 5.5 Medium2026-01-06
CVE-2025-13215 Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure — Shortcodes and extra features for Phlox theme 5.3 Medium2026-01-06
CVE-2025-68436 Craft CMS vulnerable to potential information disclosure via unchecked asset relocation — cms 6.5 -2026-01-05
CVE-2025-67732 Dify Vulnerable to Plaintext API Key Exposure via Model Provider Configuration Endpoint — dify 5.4 -2026-01-05
CVE-2025-68273 Signal K Server Vulnerable to Unauthenticated Information Disclosure via Exposed Endpoints — signalk-server 5.3 Medium2026-01-01
CVE-2025-61594 URI Credential Leakage Bypass over CVE-2025-27221 — uri 7.5 -2025-12-30
CVE-2025-15103 DVP-12SE11T - Authentication Bypass via Partial Password Disclosure — DVP-12SE11T 8.1 High2025-12-30
CVE-2025-14280 PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File — PixelYourSite – Your smart PIXEL (TAG) & API Manager 5.3 Medium2025-12-29
CVE-2025-15070 Data Exposure in Gmission Web FAX — Web Fax 5.5 Medium2025-12-29
CVE-2025-15065 Data Exposure in Kings Information & Network KESS Enterprise — KESS Enterprise 6.3 Medium2025-12-29
CVE-2025-15141 Halo Configuration actuator information disclosure — Halo 3.1 Low2025-12-28
CVE-2025-15121 JeecgBoot getDeptRoleByUserId information disclosure — JeecgBoot 2.4 Low2025-12-28
CVE-2025-15082 TOZED ZLT M30s Web Management proc_post information disclosure — ZLT M30s 5.3 Medium2025-12-25
CVE-2025-12491 Senstar Symphony FetchStoredLicense Information Disclosure Vulnerability — Symphony 7.5AIHighAI2025-12-23
CVE-2025-8305 Information Disclosure in Identity Agent Debug Files — Identity Awareness 6.5 Medium2025-12-22
CVE-2025-8304 Information Disclosure in Identity Agent Registry Keys — Identity Agent 6.5 Medium2025-12-22
CVE-2025-12492 Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin <= 2.11.0 - Unauthenticated Sensitive Information Exposure — Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 5.3 Medium2025-12-20
CVE-2025-68429 Storybook manager bundle may expose environment variables during build — storybook 7.3 High2025-12-17
CVE-2025-68110 ChurchCRM discloses database information on error message — CRM 10.0 Critical2025-12-17
CVE-2025-14553 Password Hash Leak Could Lead to Unauthorized Access on Tapo App via Local Network — TP-Link Tapo App 7.3AIHighAI2025-12-16
CVE-2025-13439 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter — Fancy Product Designer 5.9 Medium2025-12-16
CVE-2025-11670 NTLM Hash Exposure Vulnerability — ManageEngine ADManager Plus 6.4 Medium2025-12-15
CVE-2025-11693 Export WP Page to Static HTML & PDF <= 4.3.4 - Unauthenticated Cookie Exposure via Log File — Export WordPress Pages to Static HTML & PDF — Static Site Export 9.8 Critical2025-12-13
CVE-2025-12512 GenerateBlocks <= 2.1.2 - Authenticated (Contributor+) Information Exposure via Metadata — GenerateBlocks 4.3 Medium2025-12-13
CVE-2025-12408 Events Manager <= 7.2.2.2 - Unauthenticated Information Exposure — Events Manager – Calendar, Bookings, Tickets, and more! 5.3 Medium2025-12-12
CVE-2025-13660 Guest Support <= 1.2.3 - Unauthenticated User Email Disclosure in guest_support_handler AJAX Endpoint — Guest Support 5.3 Medium2025-12-12

Vulnerabilities classified as CWE-200 (信息暴露) represent 2723 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.