Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-497 (将系统数据暴露到未授权控制的范围) — Vulnerability Class 286

286 vulnerabilities classified as CWE-497 (将系统数据暴露到未授权控制的范围). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2024-53683 Ossur Mobile Logic Application Exposure of Sensitive System Information to an Unauthorized Control Sphere — Mobile Logic Application 4.4 Medium2025-01-17
CVE-2024-11029 Freeipa: administrative user data leaked through systemd journal 5.5 Medium2025-01-15
CVE-2025-0061 Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform — SAP BusinessObjects Business Intelligence Platform 8.7 High2025-01-14
CVE-2025-0059 Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) — SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) 6.0 Medium2025-01-14
CVE-2025-0056 Information Disclosure vulnerability in SAP GUI for Java — SAP GUI for Java 6.0 Medium2025-01-14
CVE-2025-0055 Information Disclosure vulnerability in SAP GUI for Windows — SAP GUI for Windows 6.0 Medium2025-01-14
CVE-2024-45640 IBM Security QRadar EDR information disclosure — Security QRadar EDR 5.3 Medium2025-01-07
CVE-2024-52367 IBM Concert Software information disclosure — Concert Software 5.3 Medium2025-01-07
CVE-2024-12993 Location information exposure in Infinix Weather app — com.rlk.weathers 4.3 -2024-12-30
CVE-2024-52321 Sharp多款产品 安全漏洞 — home 5G HR02 7.5 -2024-12-23
CVE-2024-54279 WordPress WP-NERD Toolkit plugin <= 1.1 - Sensitive Data Exposure vulnerability — WP-NERD Toolkit 6.5 -2024-12-16
CVE-2023-23472 IBM InfoSphere Information Server information disclosure — InfoSphere Information Server 3.1 Low2024-12-11
CVE-2024-32732 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform — SAP BusinessObjects Business Intelligence platform 5.3 Medium2024-12-10
CVE-2024-53814 WordPress Analytify plugin <= 5.4.3 - Broken Access Control vulnerability — Analytify 6.5 Medium2024-12-09
CVE-2024-53867 Synapse Matrix has a partial room state leak via Sliding Sync — synapse 4.3 Medium2024-12-03
CVE-2024-25035 IBM Cognos Controller information disclosure — Cognos Controller 5.3 Medium2024-12-03
CVE-2024-53768 WordPress Content Audit Exporter plugin <= 1.1 - Sensitive Data Exposure vulnerability — Content Audit Exporter 5.3 Medium2024-11-30
CVE-2024-22037 Database password leaked by systemd uyuni-server-attestation service — SUSE Manager Server 5.0 5.5 Medium2024-11-28
CVE-2024-10240 Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab — GitLab 5.3 Medium2024-11-26
CVE-2024-9929 Hitachi Energy NSD570 安全漏洞 — NSD570 Teleprotection Equipment 4.3 Medium2024-11-26
CVE-2024-41781 IBM PowerVM Hypervisor information disclosure — PowerVM Hypervisor 5.1 Medium2024-11-22
CVE-2024-52033 Rakuten Turbo 5G 安全漏洞 — Rakuten Turbo 5G 5.3 Medium2024-11-20
CVE-2024-37070 IBM Concert Software information disclosure — Concert Software 4.3 Medium2024-11-19
CVE-2024-52582 cachi2 allows traceback prints locals — cachi2 4.7 Medium2024-11-19
CVE-2021-1234 Cisco SD-WAN vManage Information Disclosure Vulnerabilities — Cisco Catalyst SD-WAN Manager 5.3 Medium2024-11-18
CVE-2024-36509 Fortinet FortiWeb 安全漏洞 — FortiWeb 3.8 Medium2024-11-12
CVE-2024-47799 SoftBank Mesh Wi-Fi router RP562B 安全漏洞 — Mesh Wi-Fi router RP562B 3.5 Low2024-11-12
CVE-2024-50528 WordPress Stacks Mobile App Builder plugin <= 5.2.3 - Sensitive Data Exposure vulnerability — Stacks Mobile App Builder 7.5 High2024-11-04
CVE-2024-50425 WordPress WP Booking System – Booking Calendar plugin <= 2.0.19.10 - Broken Access Control vulnerability — WP Booking System 6.5 Medium2024-10-29
CVE-2024-48024 WordPress Keep Backup Daily plugin <= 2.1.3 - Sensitive Data Exposure vulnerability — Keep Backup Daily 7.5 High2024-10-17

Vulnerabilities classified as CWE-497 (将系统数据暴露到未授权控制的范围) represent 286 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.