Skip to content

CWE-215 · weakness in Information Disclosure

Insertion of Sensitive Information Into Debugging Code

27 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 27 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Insertion of Sensitive Information Into Debugging Code in microweber/microweberCVE-2022-0721microweber · CVSS 8.8 · 1.4% likely

    Microweber

  2. CF CLI does not sanitize user's password in verbose/trace/debugCVE-2019-3781Cloud Foundry · CVSS 8.2 · 1.3% likely

    Cloud Foundry

  3. Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly.CVE-2018-1002104Kubernetes · CVSS 5.3 · 1.1% likely

    Kubernetes

  4. Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability. A user with access to Garden logs may be able to obtain leaked credentials and…CVE-2018-1191Cloud Foundry · 0.9% likely

    Cloud Foundry

  5. CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug InfoCVE-2025-34081Contec Co.,Ltd. · CVSS 6.9 · 0.7% likely

    Contec Co., Ltd.

  6. Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Debug Bundle Contains Sensitive Data V-2022-003.CVE-2025-27684Printerlogic · CVSS 7.5 · 0.6% likely

    Printerlogic

  7. PHPGurukul News Portal settings.py insertion of sensitive information into debugging codeCVE-2025-12616PHPGurukul · CVSS 3.7 · 0.6% likely

    PHPGurukul

  8. WordPress Importify (Dropshipping WooCommerce) plugin <= 1.0.4 - Sensitive Data Exposure vulnerabilityCVE-2023-49194importify · CVSS 5.3 · 0.5% likely
  9. SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information DisclosureCVE-2026-74799siyuan-note · CVSS 9.3 · 0.5% likely

    Siyuan-Note

  10. Dgraph: Unauthenticated pprof endpoint leaks admin auth tokenCVE-2026-40173dgraph-io · CVSS 9.4 · 0.5% likely

    Dgraph-Io

  11. Unauthenticated Data Export and Source Code Disclosure via /dbviewer/ in METIS WICCVE-2026-2250METIS Cyberspace Technology SA · CVSS 7.5 · 0.5% likely
  12. NATS credentials are exposed in monitoring port via command-line argvCVE-2026-33247nats-io · CVSS 7.4 · 0.4% likely

    Nats-Io

  13. cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration codeCVE-2024-22194Cyber-Domain-Ontology · CVSS 2.2 · 0.4% likely
  14. A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symbols have not been removed. This could a…CVE-2026-62652Siemens · CVSS 5.3 · 0.3% likely

    Siemens

  15. Cadmos LTI exposure of sensitive information via debug modeCVE-2026-102628Eummena · CVSS 9.3 · 0.3% likely
  16. HCL Hive is affected by an information exposure vulnerabilityCVE-2026-21759HCLSoftware · CVSS 4.3 · 0.3% likely

    HCLSoftware

  17. Webkul Aureus ERP composer.json insertion of sensitive information into debugging codeCVE-2026-112190Webkul · CVSS 5.3 · 0.3% likely

    Webkul

  18. Information Disclosure Vulnerability in JournalpumpCVE-2023-51390Aiven-Open · CVSS 6.5 · 0.3% likely

    Aiven-Open

  19. WordPress Klarna Order Management for WooCommerce Plugin <= 1.9.8 - Sensitive Data Exposure VulnerabilityCVE-2025-58598Klarna · CVSS 6.6 · 0.3% likely
  20. YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq ParameterCVE-2026-116820YesWiki · CVSS 5.3 · 0.2% likely

    YesWiki

  21. IBM Cognos Mobile information disclosureCVE-2025-0895IBM · CVSS 2.4 · 0.2% likely

    IBM

  22. The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC…CVE-2023-21462Samsung Mobile · CVSS 4.2 · 0.2% likely

    Samsung

  23. Exposed tokens in SUSE Rancher AI Agent logsCVE-2026-44934SUSE · CVSS 7 · 0.2% likely

    SUSE

  24. Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information Into Debugging Code v…CVE-2026-79694Dell · CVSS 5.5 · 0.1% likely

    Dell

  25. An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. An information Leak occurs in the camera driver due to Ins…CVE-2026-33966Samsung · CVSS 2.8 · 0.1% likely

    Samsung

  26. In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User int…CVE-2026-20543MediaTek, Inc. · CVSS 5.5 · 0.1% likely

    MediaTek, Inc.

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.