Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-200 (信息暴露) — Vulnerability Class 2724

2724 vulnerabilities classified as CWE-200 (信息暴露). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2022-41935 Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui — xwiki-platform 5.3 Medium2022-11-23
CVE-2022-41946 TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc — pgjdbc 4.7 Medium2022-11-23
CVE-2022-39397 Exposure of sensitive information in aliyun-oss-client — oss-rs 5.6 Medium2022-11-22
CVE-2022-41939 Credential exposure when running third-party builders in knative/func — func 6.1 Medium2022-11-19
CVE-2022-41618 WordPress Media Library Assistant plugin <= 3.00 - Unauthenticated Error Log Disclosure vulnerability — Media Library Assistant (WordPress plugin) 3.7 Low2022-11-18
CVE-2022-41655 WordPress Phone Orders for WooCommerce plugin <= 3.7.1 - Auth. Sensitive Data Exposure vulnerability — Phone Orders for WooCommerce (WordPress plugin) 4.3 Medium2022-11-18
CVE-2022-42883 WordPress Quiz And Survey Master plugin <= 7.3.10 - Sensitive Information Disclosure vulnerability — Quiz And Survey Master (WordPress plugin) 5.3 Medium2022-11-18
CVE-2022-41914 Non-constant-time SCIM token comparison in Zulip Server — zulip 3.7 Low2022-11-16
CVE-2022-41917 Incorrect Error Handling Allowed Partial File Reads Over REST API in OpenSearch — OpenSearch 4.3 Medium2022-11-15
CVE-2022-28764 Local information exposure in Zoom Clients — Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) 3.3 Low2022-11-14
CVE-2022-34314 IBM CICS TX 信息泄露漏洞 — CICS TX 4.0 Medium2022-11-14
CVE-2022-34312 IBM CICS TX information disclosure — CICS TX 4.0 Medium2022-11-14
CVE-2022-34329 IBM CICS TX information disclosure — CICS TX 5.3 Medium2022-11-14
CVE-2022-34313 IBM CICS TX Standard is vulnerable to allowing attackers access to an application via insecure session cookies — CICS TX 4.3 Medium2022-11-14
CVE-2022-27949 Apache Airflow prior to 2.3.1 may include sensitive values in rendered template — Apache Airflow 7.5 -2022-11-14
CVE-2022-39385 Users erroneously and transparently added to private messages in Discourse — discourse 6.5 Medium2022-11-14
CVE-2022-41913 Discourse-calendar exposes members of hidden groups — discourse-calendar 4.3 Medium2022-11-14
CVE-2022-41876 ezplatform-graphql GraphQL queries can expose password hashes — ezplatform-graphql 7.5 High2022-11-10
CVE-2022-39307 Grafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password — grafana 6.7 Medium2022-11-09
CVE-2022-44746 Acronis Cyber Protect 安全漏洞 — Acronis Cyber Protect Home Office 5.5 -2022-11-07
CVE-2022-38654 HCL Domino is susceptible to an information disclosure vulnerability — HCL Domino 5.5 Medium2022-11-04
CVE-2022-39378 Displaying user badges can leak topic titles to users that have no access to the topic — discourse 5.3 Medium2022-11-02
CVE-2022-23738 Incomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo files — GitHub Enterprise Server 5.7 -2022-11-01
CVE-2022-39018 Broken access controls on PDFtron data in M-Files Hubshare — Hubshare 8.2 High2022-10-31
CVE-2022-24670 Any user can run unrestricted LDAP queries against a configuration endpoint — Access Management 7.1 High2022-10-27
CVE-2021-45475 Information disclosure in Yordam Library Information Document Automation Program — Yordam Library Information Document Automation Program 5.3 Medium2022-10-27
CVE-2022-20776 Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities — Cisco RoomOS Software 5.5 Medium2022-10-26
CVE-2022-20955 Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities — Cisco RoomOS Software 5.5 Medium2022-10-26
CVE-2022-20954 Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities — Cisco RoomOS Software 5.5 Medium2022-10-26
CVE-2022-20953 Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities — Cisco RoomOS Software 5.5 Medium2022-10-26

Vulnerabilities classified as CWE-200 (信息暴露) represent 2724 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.