Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-532 (通过日志文件的信息暴露) — Vulnerability Class 598

598 vulnerabilities classified as CWE-532 (通过日志文件的信息暴露). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2026-23493 Pimcore ENV Variables and Cookie Informations are exposed in http_error_log — pimcore 8.6 High2026-01-15
CVE-2026-20818 Windows Kernel Information Disclosure Vulnerability — Windows Server 2016 6.2 Medium2026-01-13
CVE-2026-22798 hermes's raw options logging may disclose secrets passed in via subcommand options argument — hermes 5.9 Medium2026-01-12
CVE-2025-68919 Fujitsu多款产品和Fsas多款产品 日志信息泄露漏洞 — ETERNUS SF ACM/SC/Express 5.6 Medium2025-12-24
CVE-2025-14437 Hummingbird <= 3.18.0 - Unauthenticated Sensitive Information Exposure via Log File — Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN 7.5 High2025-12-18
CVE-2025-13321 Mattermost Desktop App logging sensitive information and fails to clear data on server deletion — Mattermost 3.3 Low2025-12-17
CVE-2025-14432 Poly Video - Sensitive Data Might Be Written to Log File — Poly G7500 4.9AIMediumAI2025-12-16
CVE-2025-13743 Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs — Docker Desktop 7.5AIHighAI2025-12-09
CVE-2024-47570 Fortinet多款产品 日志信息泄露漏洞 — FortiSASE 6.3 Medium2025-12-09
CVE-2025-64650 IBM Storage Defender - Resiliency Service Information Disclosure — Storage Defender - Resiliency Service 6.5 Medium2025-12-08
CVE-2020-36876 ReQuest Serious Play F3 Media Server <= 7.0.3 Debug Log Disclosure2020 — ReQuest Serious Play Pro 7.5 -2025-12-05
CVE-2025-12996 Medtronic CareLink Network 安全漏洞 — CareLink Network 4.1 Medium2025-12-04
CVE-2025-66411 Coder logged sensitive objects unsanitized — coder 7.8 High2025-12-03
CVE-2025-13611 Insertion of Sensitive Information into Log File in GitLab — GitLab 2.0 Low2025-11-26
CVE-2025-20373 Sensitive Information Disclosure in “_internal“ index through Splunk Add-On for Palo Alto Networks — Splunk Add-on for Palo Alto Networks 2.7 Low2025-11-26
CVE-2025-11446 upKeeper Manager 安全漏洞 — upKeeper Manager 7.5AIHighAI2025-11-19
CVE-2025-62209 Windows License Manager Information Disclosure Vulnerability — Windows 10 Version 1507 5.5 Medium2025-11-11
CVE-2025-62208 Windows License Manager Information Disclosure Vulnerability — Windows 10 Version 1507 5.5 Medium2025-11-11
CVE-2025-12940 Credentials recorded in logs in NETGEAR WAX610 and WAX610Y — WAX610 6.5 -2025-11-11
CVE-2025-11008 CE21 Suite <= 2.3.1 - Unauthenticated Sensitive Information Exposure to Privilege Escalation — CE21 Suite 9.8 Critical2025-11-04
CVE-2025-40603 SonicWall SMA100 Series 安全漏洞 — SMA100 4.9 -2025-10-31
CVE-2025-62232 Apache APISIX: basic-auth logs plaintext credentials at info level — Apache APISIX 6.5 -2025-10-31
CVE-2024-58269 Rancher exposes sensitive information through audit logs — rancher 4.3 Medium2025-10-29
CVE-2025-62262 Liferay Portal和Liferay DXP 日志信息泄露漏洞 — Portal 3.3AILowAI2025-10-27
CVE-2025-11248 Sensitive Information Logged — ManageEngine Endpoint Central 3.2 Low2025-10-27
CVE-2025-11504 Quickcreator – AI Blog Writer 0.0.9 - 0.1.17 - Unauthenticated API Key Exposure — Quickcreator – AI Blog Writer 7.5 High2025-10-24
CVE-2025-62705 OpenBao and Vault Leak []byte Fields in Audit Logs — openbao 7.5AIHighAI2025-10-22
CVE-2025-62513 OpenBao leaks HTTPRawBody in Audit Logs — openbao 7.5AIHighAI2025-10-22
CVE-2025-46752 Fortinet FortiDLP 日志信息泄露漏洞 — FortiDLP 4.2 Medium2025-10-16
CVE-2025-20329 Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability — Cisco RoomOS Software 4.9 Medium2025-10-15

Vulnerabilities classified as CWE-532 (通过日志文件的信息暴露) represent 598 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.