Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-200 (信息暴露) — Vulnerability Class 2723

2723 vulnerabilities classified as CWE-200 (信息暴露). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2024-11089 Anonymous Restricted Content <= 1.6.5 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure — Anonymous Restricted Content 5.3 Medium2024-11-21
CVE-2024-9542 Sky Addons for Elementor <= 2.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Content Switcher Widget Elementor Template — Sky Addons – Elementor Addons with Widgets & Templates 4.3 Medium2024-11-21
CVE-2024-10316 Stratum – Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates — Stratum Widgets for Elementor 4.3 Medium2024-11-21
CVE-2024-10365 The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates — The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce 4.3 Medium2024-11-20
CVE-2024-52506 Graylog can leak other users' reports via concurrent PDF report rendering — graylog2-server 4.3AIMediumAI2024-11-18
CVE-2024-43416 GLPI vulnerable to enumeration of users' email addresses by unauthenticated user — glpi 7.5 High2024-11-18
CVE-2020-3525 Cisco Identity Services Engine Password Disclosure to an Unauthorized Actor Vulnerability — Cisco Identity Services Engine Software 4.9 -2024-11-18
CVE-2024-45791 Apache HertzBeat: Exposure sensitive token via http GET method with query string — Apache HertzBeat 7.5AIHighAI2024-11-18
CVE-2024-52508 Nextcloud Mail auto configurator can be tricked into sending account information to wrong servers — security-advisories 8.2 High2024-11-15
CVE-2024-52513 Nextcloud Server's Attachments folder for Text app is accessible on "Files drop" and "Password protected" shares — security-advisories 2.6 Low2024-11-15
CVE-2024-52517 Nextcloud Server's global credentials of external storages are sent back to the frontend — security-advisories 4.6 Medium2024-11-15
CVE-2024-52523 Nextcloud Server Custom defined credentials of external storages are sent back to the frontend — security-advisories 4.6 Medium2024-11-15
CVE-2022-20648 Cisco Redundancy Configuration Manager Debug Information Disclosure Vulnerability — Cisco Redundancy Configuration Manager 5.3 Medium2024-11-15
CVE-2024-8978 Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure — Essential Addons for Elementor – Popular Elementor Templates & Widgets 5.7 Medium2024-11-15
CVE-2024-8979 Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation — Essential Addons for Elementor – Popular Elementor Templates & Widgets 8.0 High2024-11-15
CVE-2024-47915 VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor — VaeMendis Ubooquity version 2.1.2 7.5 High2024-11-14
CVE-2024-48900 Moodle: idor when accessing list of badge recipients 4.3AIMediumAI2024-11-13
CVE-2024-52297 Tolgee's configuration all configuration properties leaked in public configuration DTO — tolgee-platform 9.8 Critical2024-11-12
CVE-2024-10971 Devolutions DVLS 安全漏洞 — DVLS (Devolutions Server) 6.5AIMediumAI2024-11-12
CVE-2024-46894 Siemens SINEC INS 安全漏洞 — SINEC INS 6.3 Medium2024-11-12
CVE-2024-52032 Private channel names leaking when Elasticsearch is enabled — Mattermost 4.3 Medium2024-11-09
CVE-2024-10352 Magical Addons For Elementor <= 1.2.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template — Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) 4.3 Medium2024-11-09
CVE-2024-8756 Quform - WordPress Form Builder <= 2.20.0 - Unauthenticated Sensitive Information Exposure — Quform - WordPress Form Builder 5.3 Medium2024-11-09
CVE-2024-10285 CE21 Suite <= 2.2.0 - JWT Token Disclosure — CE21 Suite 9.8 Critical2024-11-09
CVE-2024-52001 Portal user is able to access forbidden services information in Combodo iTop — iTop 4.3 -2024-11-08
CVE-2024-48011 Dell PowerProtect DD 信息泄露漏洞 — PowerProtect DD 3.1 Low2024-11-08
CVE-2024-10965 emqx neuron JSON File schema information disclosure — neuron 4.3 Medium2024-11-07
CVE-2024-50342 Internal address and port enumeration allowed by NoPrivateNetworkHttpClient in symfony/http-client — symfony 3.1 Low2024-11-06
CVE-2024-20507 Cisco Meeting Management Information Disclosure Vulnerability — Cisco Meeting Management 4.3 Medium2024-11-06
CVE-2024-20457 Cisco Unified Communications Manager IM & Presence Service Information Disclosure Vulnerability — Cisco Unified Communications Manager IM and Presence Service 6.5 Medium2024-11-06

Vulnerabilities classified as CWE-200 (信息暴露) represent 2723 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.