CWE-497 · weakness in Information Disclosure
Exposure of Sensitive System Information to an Unauthorized Control Sphere
453 CVEs · 1 exploited
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 1
- check available
- 4
- likely to be exploited
- 2
Every one of the 453 is a mark on the map. Named now: 1 to 26, most at risk first.
- Windows Kernel Information Disclosure Vulnerability
- Xerte Online Toolkits <= 3.15 - Remote Code Execution
- Fides Privacy Center ≤ 2.39.1 - Server-Side URL Disclosure
- Parse Server - GraphQL Schema Information Disclosure
- Ajax Load More < 7.6.1 - Unauthenticated Sensitive Information Exposure
- Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call. This is GL…
- Exposure of Sensitive Information to an Unauthorized Actor
- Nagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information Disclosure
- Full Path Disclosure in AdmirorFrames Joomla! Extension
- GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.
- A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized in the GraphQL API. This flaw allows authenticated ACS users…
- In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies. This can be used as a hint by an attacker to specifically craft attacks to…
- Cisco IoT Field Network Director Information Disclosure Vulnerability
- Nagios XI < 2024R1.1.2 API Keys & Hashed Passwords Authenticated Information Disclosure
- Cisco SD-WAN vManage Information Disclosure Vulnerability
- Cisco Email Security Appliance and Cisco Secure Email and Web Manager Information Disclosure Vulnerability
- Nagios XI < 2024R1.4.2 API Key Disclosure via Neptune Themes
- Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information Disclosure
- Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- Junos OS and Junos OS Evolved: A vulnerability allows a network based unauthenticated attacker which sends a high rate of specific traffic to cause a partial Denial of Service
- Windows Print Spooler Components Information Disclosure Vulnerability
- Windows Secure Kernel Mode Information Disclosure Vulnerability
- Windows Hello Information Disclosure Vulnerability
- Windows MIDI Service Module Information Disclosure Vulnerability
- Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
- Microsoft Trace Data Helper Information Disclosure Vulnerability
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.