Exposure of Private Personal Information to an Unauthorized Actor

Every one of the 208 is a mark on the map. Named now: 1 to 26, most at risk first.

1. XWiki < 4.10.15 - Sensitive Information DisclosureCVE-2023-50719xwiki · CVSS 7.5 · 84% likely

   Xwiki

2. Easy!Appointments <1.4.3 - Broken Access ControlCVE-2022-0482alextselegidis · CVSS 9.1 · 44% likely

   Alex Tselegidis

3. XWiki < 12.10.11, 13.4.4 & 13.9-rc-1 - Information DisclosureCVE-2022-24819xwiki · CVSS 5.3 · 3.2% likely

   Xwiki

4. Event Monster <= 1.4.3 - Information Exposure Via Visitors List ExportCVE-2024-11396awordpresslife · CVSS 5.3 · 2.1% likely

   Awordpresslife

5. XWiki Platform - Password Hash DisclosureCVE-2026-48048xwiki · CVSS 7.5 · 2.0% likely

   Xwiki

6. XWiki XML View - Sensitive Information ExposureCVE-2025-54125xwiki · CVSS 8.7 · 1.5% likely

   Xwiki

7. PrestaShop - Information DisclosureCVE-2025-51586Prestashop · CVSS 3.7 · 0.8% likely

   PrestaShop

8. SureForms <= 1.13.1 - Sensitive Information ExposureCVE-2025-12536brainstormforce · CVSS 5.3 · 0.8% likely

   Brainstorm Force

9. Azure CLI REST Command Information Disclosure VulnerabilityCVE-2023-36052Microsoft · CVSS 8.6 · 21% likely

   Microsoft

10. curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libc…CVE-2021-22876https://github.com/curl/curl · CVSS 5.3 · 5.3% likely
11. A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.7.16 and iPadOS 16.7.16, iOS 18.7.8 and iPadOS 18.7.8, iOS…CVE-2026-28950Apple · CVSS 6.2 · 2.9% likelycovered by CyberSIXT

    Apple

12. Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirectsCVE-2022-0155follow-redirects · CVSS 8 · 2.6% likely

    Follow-Redirects

13. Windows Snipping Tool Information Disclosure VulnerabilityCVE-2023-28303Microsoft · CVSS 3.3 · 2.0% likely

    Microsoft

14. Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Look…CVE-2019-15623Nextcloud Server · 1.9% likely
15. Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-protected photographs v…CVE-2017-16769Synology · 1.9% likely

    Synology

16. Adobe Acrobat Reader privacy violation vulnerability could lead to privilege escalationCVE-2021-28559Adobe · CVSS 5.3 · 1.6% likely

    Adobe

17. Exposure of Private Personal Information to an Unauthorized Actor in elgg/elggCVE-2021-3980elgg · CVSS 5.3 · 1.6% likely

    Elgg

18. Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityCVE-2024-30056Microsoft · CVSS 7.1 · 1.6% likely

    Microsoft

19. Visual Studio Code Jupyter Extension Spoofing VulnerabilityCVE-2023-36018Microsoft · CVSS 7.8 · 1.5% likely

    Microsoft

20. Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityCVE-2024-26192Microsoft · CVSS 8.2 · 1.5% likely

    Microsoft

21. Missing rate limit when trying to join a password protected Nextcloud Talk conversationCVE-2022-35932nextcloud · CVSS 3.5 · 1.4% likely

    Nextcloud

22. Exposure of Private Personal Information to an Unauthorized Actor in notrinos/notrinoserpCVE-2022-2921notrinos · CVSS 8.8 · 1.4% likely
23. This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6…CVE-2025-43227Apple · CVSS 7.5 · 1.3% likely

    Apple

24. Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityCVE-2024-29987Microsoft · CVSS 6.5 · 1.2% likely

    Microsoft

25. Exposure of Private Personal Information to an Unauthorized Actor in lquixada/cross-fetchCVE-2022-1365lquixada · CVSS 8.8 · 1.2% likely
26. A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance, formerly known a…CVE-2022-20942Cisco · CVSS 6.5 · 1.1% likely

    Cisco

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.