Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-200 (信息暴露) — Vulnerability Class 2723

2723 vulnerabilities classified as CWE-200 (信息暴露). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2024-36986 Risky command safeguards bypass through Search ID query in Analytics Workspace — Splunk Enterprise 6.3 Medium2024-07-01
CVE-2024-34696 GeoServer's Server Status shows sensitive environmental variables and Java properties — geoserver 4.5 Medium2024-07-01
CVE-2024-30135 Sensitive Information Disclosure vulnerability affects DRYiCE AEX v10 — DRYiCE AEX 3.3 Low2024-06-28
CVE-2024-2795 SEO SIMPLE PACK <= 3.2.1 - Information Exposure — SEO SIMPLE PACK 5.3 Medium2024-06-28
CVE-2024-5010 WhatsUp Gold TestController multiple information disclosure vulnerabilities — WhatsUp Gold 7.5 High2024-06-25
CVE-2024-6294 udn News App - Sensitive Information Exposure — udn News App 3.9 Low2024-06-25
CVE-2024-35776 WordPress phpinfo() WP plugin <= 5.0 - Unauthenticated Data Exposure vulnerability — phpinfo() WP 5.3 Medium2024-06-21
CVE-2024-5059 WordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerability — Event Management Tickets Booking 5.3 Medium2024-06-21
CVE-2024-37895 API Key Leak in lobe-chat — lobe-chat 5.7 Medium2024-06-17
CVE-2024-5464 Huawei 手机安全漏洞 — HarmonyOS 4.0 Medium2024-06-14
CVE-2024-0093 CVE — vGPU software and Cloud Gaming 6.5 Medium2024-06-13
CVE-2024-37307 Cilium leaks sensitive information in cilium-bugtool — cilium 7.9 High2024-06-13
CVE-2024-30300 Tenable Vulnerability Disclosure | Sensitive Information Disclosure Via Fake FMPS Worker — Adobe Framemaker Publishing Server 9.8 Critical2024-06-13
CVE-2024-30472 Dell ThinOS 信息泄露漏洞 — Wyse 5070 Thin Client 7.5 High2024-06-13
CVE-2024-37325 Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability — Azure Data Science Virtual Machines 8.1 High2024-06-11
CVE-2024-35263 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability — Microsoft Dynamics 365 (on-premises) version 9.1 5.7 Medium2024-06-11
CVE-2024-30096 Windows Cryptographic Services Information Disclosure Vulnerability — Windows 10 Version 1809 5.5 Medium2024-06-11
CVE-2024-5813 SSH Private Key Leak in BeyondInsight PasswordSafe — BeyondInsight PasswordSafe 5.9 Medium2024-06-11
CVE-2024-4266 MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information Exposure — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor 5.3 Medium2024-06-11
CVE-2020-11843 Potential information leakage in administrator enabled debug mode — NetIQ Access Manager 6.5 Medium2024-06-11
CVE-2024-34684 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Scheduling) — SAP BusinessObjects Business Intelligence Platform 3.7 Low2024-06-11
CVE-2024-28164 Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures) — SAP NetWeaver AS Java 5.3 Medium2024-06-11
CVE-2024-35682 WordPress Otter Blocks PRO plugin <= 2.6.11 - Authenticated Sensitive Data Exposure vulnerability — Otter Blocks PRO 4.3 Medium2024-06-08
CVE-2024-35691 WordPress Widget Options - Extended plugin <= 5.1.0 - Multiple Data Exposure Vulnerability — Widget Options - Extended 4.3 Medium2024-06-08
CVE-2024-35710 WordPress Podlove Web Player plugin <= 5.7.3 - Sensitive Data Exposure vulnerability — Podlove Web Player 5.3 Medium2024-06-08
CVE-2024-5133 Account Takeover via Exposed Recovery Token in lunary-ai/lunary — lunary-ai/lunary 8.0AIHighAI2024-06-06
CVE-2024-35178 Jupyter server on Windows discloses Windows user password hash — jupyter_server 7.5 High2024-06-06
CVE-2024-37150 Private npm registry support used scope auth token for downloading tarballs — deno 7.6 High2024-06-06
CVE-2024-5615 Open Graph <= 1.11.2 - Unauthenticated Sensitive Information Exposure — Open Graph 5.3 Medium2024-06-06
CVE-2024-0910 Restrict for Elementor <= 1.0.7 - Protection Mechanism Bypass — Restrict for Elementor 5.3 Medium2024-06-06

Vulnerabilities classified as CWE-200 (信息暴露) represent 2723 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.