Skip to content

CWE-1258 · weakness in Information Disclosure

Exposure of Sensitive System Information Due to Uncleared Debug Information

16 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

check available
1

Every one of the 16 is a mark on the map. Named now: 1 to 16, most at risk first.

  1. 1 Click WordPress Migration <= 2.2 - Unauthenticated Information DisclsoureCVE-2025-322571clickmigration · CVSS 5.3 · 0.8% likely
  2. Drivers: hv: vmbus: Track decrypted status in vmbus_gpadlCVE-2024-36912Linux · CVSS 9.6 · 1.0% likely

    Linux

  3. Slack Morphism for Rust before 0.41.0 can accidentally leak Slack OAuth client information in application debug logsCVE-2022-31162abdolence · CVSS 7.5 · 0.9% likely
  4. Exposure of sensitive Slack webhook URLs in debug logs and tracesCVE-2022-39292abdolence · CVSS 7.5 · 0.9% likely
  5. Drivers: hv: vmbus: Leak pages if set_memory_encrypted() failsCVE-2024-36913Linux · CVSS 9.3 · 0.7% likely

    Linux

  6. Calendar app returns full stacktrace when an error happens while editing appointmentCVE-2023-48308nextcloud · CVSS 3.5 · 0.5% likely

    Nextcloud

  7. WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerabilityCVE-2026-66432denishua · CVSS 7.5 · 0.4% likely

    Denishua

  8. Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.90.00, contain an Exposure of Sensitive System Information D…CVE-2026-26948Dell · CVSS 4.9 · 0.3% likely

    Dell

  9. Senstive information disclosure was affecting ubuntu-desktop-provisionCVE-2025-15480Canonical · CVSS 2.7 · 0.3% likely

    Canonical

  10. Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit…CVE-2025-26482Dell · CVSS 4.9 · 0.3% likely

    Dell

  11. Senstive information disclosure was affecting subiquityCVE-2025-14551Canonical · CVSS 2.7 · 0.3% likely

    Canonical

  12. NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause exposure of sensitive system information due to uncleared debug information. A su…CVE-2026-65127NVIDIA · CVSS 4.1 · 0.3% likely

    NVIDIA

  13. WordPress JetBlog plugin <= 2.4.8 - Sensitive Data Exposure vulnerabilityCVE-2026-52696Jetimpex Inc. · CVSS 7.5 · 0.2% likely

    Jetimpex Inc.

  14. Exposure of sensitive system information due to uncleared debug information for some Intel Unison software may allow an authenticated user to potentially enable information disclo…CVE-2022-43666Intel Unison software · CVSS 3.3 · 0.2% likely
  15. Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleare…CVE-2026-80239Dell · CVSS 2.4 · 0.2% likely

    Dell

  16. Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleare…CVE-2026-79727Dell · CVSS 3.3 · 0.1% likely

    Dell

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in