Exposure of Sensitive Information Due to Incompatible Policies

Every one of the 34 is a mark on the map. Named now: 1 to 26, most at risk first.

1. In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured…CVE-2019-10247The Eclipse Foundation · 5.9% likely

   Eclipse Foundation

2. In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a re…CVE-2019-10246The Eclipse Foundation · 4.1% likely

   Eclipse Foundation

3. Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure. The impact is: Loss of Confidentiality. T…CVE-2019-1010283Univention Corporate Server · 1.4% likely
4. Apache Airflow: Connection sensitive details exposed to users with READ permissionsCVE-2025-54831Apache Software Foundation · CVSS 6.5 · 1.0% likely

   Apache

5. Centire Yopify leaks customer informationCVE-2017-3211Centire · CVSS 5.3 · 0.8% likely
6. SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational or OLAP connections.…CVE-2022-22541SAP SE · 0.8% likely

   SAP

7. Junos Space: OpenNMS is accessible via port 9443CVE-2020-1652Juniper Networks · CVSS 5.6 · 0.7% likely

   Juniper Networks

8. Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure. The PDFEscape Online tool provides users with a "white out" functionality fo…CVE-2022-30350Avanquest · CVSS 7.5 · 0.7% likely
9. Exposure of Sensitive Information Due to Incompatible Policies in GitLabCVE-2023-3441GitLab · CVSS 6.6 · 0.7% likely

   GitLab

10. Internal infrastructure data leak in EZD RPCVE-2024-7267Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut… · CVSS 7.1 · 0.6% likely
11. Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated usersCVE-2023-40570simonw · CVSS 5.3 · 0.6% likely
12. Exposure of Sensitive Information Due to Incompatible Policies in GitLabCVE-2025-4976GitLab · CVSS 4.3 · 0.5% likely

    GitLab

13. Information Disclosure in SAP Enable NowCVE-2023-36919SAP_SE · CVSS 5.3 · 0.5% likely

    SAP

14. Seeing the SMS Verification Code in Mia Technology's Mia-MedCVE-2023-6517Mia Technology Inc. · CVSS 7.5 · 0.5% likely

    Mia Technology Inc.

15. Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fieldsCVE-2026-55425Graylog2 · CVSS 5 · 0.4% likely

    Graylog2

16. IBM Engineering Requirements Management DOORS Next for J2EE File Disclosure RuleCVE-2024-41786IBM · CVSS 5.3 · 0.4% likely

    IBM

17. Improper Access Control in Nomysoft Informatics' NomysemCVE-2026-6280NOMYSOFT Informatics Education and Consulting Inc. · CVSS 6.5 · 0.4% likely
18. IBM Concert information disclosureCVE-2024-49354IBM · CVSS 5.3 · 0.3% likely

    IBM

19. Exposure of Sensitive Information Due to Incompatible Policies in GitLabCVE-2023-5117GitLab · CVSS 3.7 · 0.3% likely

    GitLab

20. Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Sensitive Information Due to Incompatible PoliciesCVE-2025-24316Dario Health · CVSS 5.3 · 0.3% likely

    Dario Health

21. HCL Connections is vulnerable to information disclosureCVE-2025-52603HCLSoftware · CVSS 3.5 · 0.3% likely

    HCLSoftware

22. Permission policy information leakage in Backstage permission systemCVE-2025-32791backstage · CVSS 4.3 · 0.3% likely

    Backstage

23. Information Disclosure in SAP S/4 HANA (Statutory Reports)CVE-2024-44121SAP_SE · CVSS 4.3 · 0.3% likely

    SAP

24. A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP (All versions >= V5.…CVE-2023-27465Siemens · CVSS 4.6 · 0.3% likely

    Siemens

25. HCL Connections is vulnerable to information disclosureCVE-2026-56538HCLSoftware · CVSS 3.5 · 0.3% likely

    HCLSoftware

26. IBM Concert Software information disclosureCVE-2024-49827IBM · CVSS 3.7 · 0.3% likely

    IBM

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.