Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-200 (信息暴露) — Vulnerability Class 2723

2723 vulnerabilities classified as CWE-200 (信息暴露). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-13683 Devolutions Server 安全漏洞 — Server 8.1 -2025-11-28
CVE-2025-64312 Huawei HarmonyOS 安全漏洞 — HarmonyOS 4.9 Medium2025-11-28
CVE-2025-58305 Huawei HarmonyOS 安全漏洞 — HarmonyOS 6.2 Medium2025-11-28
CVE-2025-64311 Huawei HarmonyOS 安全漏洞 — HarmonyOS 5.1 Medium2025-11-28
CVE-2025-12559 Information Disclosure in Common Teams API — Mattermost 4.3 Medium2025-11-27
CVE-2025-13758 Devolutions Server 安全漏洞 — Server 6.5 -2025-11-27
CVE-2025-13765 Devolutions Server 安全漏洞 — Server 6.5 -2025-11-27
CVE-2025-59454 Apache CloudStack: Lack of user permission validation leading to data leak for few APIs — Apache CloudStack 4.3 -2025-11-27
CVE-2025-12584 Quick View for WooCommerce <= 2.2.17 - Unauthenticated Private Product Disclosure — Quick View for WooCommerce 5.3 Medium2025-11-27
CVE-2025-65957 Core Bot is Leaking Sensitive Credentials in Logs, Errors, and Messages — Core-Bot 7.5AIHighAI2025-11-25
CVE-2025-12525 Locker Content <= 1.0.0 - Unauthenticated Information Exposure — Locker Content 5.3 Medium2025-11-25
CVE-2025-65951 Inside Track / Entropy Derby Timelock Encryption Bypassed via Pre-Computed VDF Output Leakage — entropy-derby 8.7 High2025-11-25
CVE-2025-13526 OneClick Chat to Order <= 1.0.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure — OneClick Chat to Order 7.5 High2025-11-22
CVE-2025-12039 BigBuy Dropshipping Connector for WooCommerce <= 2.0.5 - Unauthenticated IP Spoofing to phpinfo() Exposure — BigBuy Dropshipping Connector for WooCommerce 5.3 Medium2025-11-21
CVE-2025-11368 LearnPress – WordPress LMS Plugin <= 4.2.9.4 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information Exposure — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses 5.3 Medium2025-11-21
CVE-2025-12426 Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposure — Quiz Maker 5.3 Medium2025-11-19
CVE-2025-12770 New User Approve <= 3.0.9 - Unauthenticated Sensitive Information Disclosure via Type Juggling — New User Approve 5.3 Medium2025-11-19
CVE-2025-64324 KubeVirt Vulnerable to Arbitrary Host File Read and Write — kubevirt 9.6AICriticalAI2025-11-18
CVE-2025-54971 Fortinet FortiADC 信息泄露漏洞 — FortiADC 3.9 Medium2025-11-18
CVE-2025-12545 Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more <= 1.49.2 - Unauthenticated Information Exposure — Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing 5.3 Medium2025-11-18
CVE-2025-12149 Unauthorized access to documents protected by Document-Level Security (DLS), when Signals watches include a search query involving protected documents — Search Guard FLX 6.2 -2025-11-14
CVE-2025-11794 Password hash and MFA secret returned in user email verification endpoint — Mattermost 4.9 Medium2025-11-14
CVE-2025-12785 Certain HP LaserJet Pro Printers – Potential Information Disclosure — HP Color LaserJet MFP M478-M479 series 6.5 -2025-11-13
CVE-2025-12784 Certain HP LaserJet Pro Printers – Potential Information Disclosure — HP Color LaserJet MFP M478-M479 series 6.5 -2025-11-13
CVE-2025-64703 MaxKB has Information Leak in sandbox — MaxKB 6.3 Medium2025-11-13
CVE-2025-12681 Comment Edit Core – Simple Comment Editing <= 3.1.0 - Unauthenticated Sensitive Information Exposure — Comment Edit Core – Simple Comment Editing 5.3 Medium2025-11-13
CVE-2025-64705 Frappe user was able to access the submission of other students — lms 4.6 -2025-11-12
CVE-2025-20379 Risky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk Enterprise — Splunk Enterprise 3.5 Low2025-11-12
CVE-2025-12732 WP Import – Ultimate CSV XML Importer for WordPress <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure — WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress 4.3 Medium2025-11-12
CVE-2025-59240 Microsoft Excel Information Disclosure Vulnerability — Microsoft 365 Apps for Enterprise 5.5 Medium2025-11-11

Vulnerabilities classified as CWE-200 (信息暴露) represent 2723 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.