CWE-1230 · weakness in Information Disclosure
Exposure of Sensitive Information Through Metadata
26 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 26 is a mark on the map. Named now: 1 to 26, most at risk first.
- Exposure of Sensitive Information in transformeroptimus/superagi
- Exposure of Sensitive Information Through Metadata in answerdev/answer
- Exposure of Private API Keys in lunary-ai/lunary
- Exposure of Sensitive Information in berriai/litellm
- WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description
- Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access
- Exposure of Sensitive Information Through Metadata in GitLab
- Dell PowerScale OneFS, 8.2.x-9.5.0.x, contains an information disclosure vulnerability in NFS. A low privileged attacker could potentially exploit this vulnerability, leading to i…
- Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire)
- Non-searchable tags can still be discovered on the tag search page and in the tags block
- MyBB may disclosure unviewable threads' titles in searches
- Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. (C…
- Tandoor Recipes: WebP and GIF Image Uploads Bypass EXIF/Metadata Stripping, Leaking GPS Coordinates and PII
- HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id
- Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability. An unauthenticated attacker with remote access could potential…
- Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block
- A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application leaks confidential information in metadata, and files such as infor…
- Opto 22 groov View Exposure of Sensitive Information Through Metadata
- RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
- PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table
- Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService
- Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware
- In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about other users' jobs.
- Session ID leakage in Zone.Identifier of downloaded files
- HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.
- Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.