Exposure of Sensitive Information Through Data Queries

Every one of the 44 is a mark on the map. Named now: 1 to 26, most at risk first.

1. phpMyFAQ - Configuration Backup DisclosureCVE-2025-69200thorsten · CVSS 7.5 · 2.1% likely

   Thorsten

2. Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matchingCVE-2025-25205advplyr · CVSS 8.2 · 4.8% likely

   Advplyr

3. Passwords used to access external services inadvertently exposed through APICVE-2021-32743Icinga · CVSS 8.8 · 1.8% likely

   Icinga

4. eSOMS Cachecontrol (Pragma) HTTP HeaderCVE-2019-19000ABB · CVSS 6.5 · 1.1% likely

   ABB

5. WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerabilityCVE-2022-41623Villatheme · CVSS 7.5 · 0.9% likely

   VillaTheme

6. Cisco SD-WAN vManage Software Information Disclosure VulnerabilityCVE-2022-20747Cisco · CVSS 6.5 · 0.9% likely

   Cisco

7. SourceCodester Best Online News Portal check_availability.php information exposureCVE-2023-0785SourceCodester · CVSS 3.7 · 0.9% likely

   SourceCodester

8. Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Information Disclosure VulnerabilityCVE-2022-20810Cisco · CVSS 6.5 · 0.8% likely

   Cisco

9. Cisco DNA Center Information Disclosure VulnerabilityCVE-2021-34782Cisco · CVSS 4.3 · 0.8% likely

   Cisco

10. ABB eSOMS: HTTP response information leakageCVE-2019-19091ABB · CVSS 4.3 · 0.8% likely

    ABB

11. Dragonfly allows arbitrary file read and write on a peer machineCVE-2025-59352dragonflyoss · CVSS 6.9 · 0.7% likely

    Dragonflyoss

12. Information leak in apiCVE-2023-1625Openstack · CVSS 7.4 · 0.7% likely

    OpenStack

13. A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass a configured rule, allow…CVE-2023-20215Cisco · CVSS 5.8 · 0.6% likely

    Cisco

14. Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API EndpointCVE-2023-7072pickplugins · CVSS 7.5 · 0.6% likely

    PickPlugins

15. Apache SkyWalking: The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL.CVE-2026-30778Apache Software Foundation · CVSS 7.5 · 0.6% likely

    Apache

16. Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.…CVE-2026-16520Genians · CVSS 8.7 · 0.5% likely

    Genians

17. A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to determine valid user names on…CVE-2024-20388Cisco · CVSS 5.3 · 0.5% likely

    Cisco

18. Free5GC: UDR nudr-dr influenceData/subs-to-notify leaks SUPI in error response body without authenticationCVE-2026-40245free5gc · CVSS 7.5 · 0.5% likely

    Free5gc

19. RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2024-019CVE-2024-13255Drupal · CVSS 7.5 · 0.5% likely

    Drupal

20. Apache Syncope: JexlContextBuilder Information DisclosureCVE-2026-42797Apache Software Foundation · CVSS 4.9 · 0.4% likely

    Apache

21. Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows Shared Memory Information Disclosure VulnerabilityCVE-2021-1372Cisco · CVSS 5.5 · 0.4% likely

    Cisco

22. WAVLINK WN551K1'live_check.shtml enables attackers to obtain sensitive router information.CVE-2024-38897Wavlink · CVSS 5.3 · 0.4% likely

    Wavlink

23. Vendure vulnerable to timing attack that enables user enumeration in NativeAuthenticationStrategyCVE-2026-25050vendurehq · CVSS 2.7 · 0.4% likely

    Vendurehq

24. Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated attacker with remote ac…CVE-2025-29981Dell · CVSS 7.5 · 0.4% likely

    Dell

25. WAVLINK WN551K1'live_mfg.shtml enables attackers to obtain sensitive router information.CVE-2024-38895Wavlink · CVSS 5.3 · 0.4% likely

    Wavlink

26. An issue in Wavlink WN551K1 allows a remote attacker to obtain sensitive information via the ExportAllSettings.sh component.CVE-2024-38892Wavlink · CVSS 6.5 · 0.4% likely

    Wavlink

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.