CWE-215 · weakness in Information Disclosure
Insertion of Sensitive Information Into Debugging Code
27 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 27 is a mark on the map. Named now: 1 to 26, most at risk first.
- Insertion of Sensitive Information Into Debugging Code in microweber/microweber
- CF CLI does not sanitize user's password in verbose/trace/debug
- Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly.
- Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability. A user with access to Garden logs may be able to obtain leaked credentials and…
- CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info
- Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Debug Bundle Contains Sensitive Data V-2022-003.
- PHPGurukul News Portal settings.py insertion of sensitive information into debugging code
- WordPress Importify (Dropshipping WooCommerce) plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
- SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosure
- Dgraph: Unauthenticated pprof endpoint leaks admin auth token
- Unauthenticated Data Export and Source Code Disclosure via /dbviewer/ in METIS WIC
- NATS credentials are exposed in monitoring port via command-line argv
- cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code
- A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symbols have not been removed. This could a…
- Cadmos LTI exposure of sensitive information via debug mode
- HCL Hive is affected by an information exposure vulnerability
- Webkul Aureus ERP composer.json insertion of sensitive information into debugging code
- Information Disclosure Vulnerability in Journalpump
- WordPress Klarna Order Management for WooCommerce Plugin <= 1.9.8 - Sensitive Data Exposure Vulnerability
- YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameter
- IBM Cognos Mobile information disclosure
- The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC…
- Exposed tokens in SUSE Rancher AI Agent logs
- Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information Into Debugging Code v…
- An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. An information Leak occurs in the camera driver due to Ins…
- In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User int…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.