Skip to content
BackEsc
Sign in

CWE-532 · weakness in Information Disclosure

Sensitive Data in Logs

1,221 CVEs · 2 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
2
check available
8
likely to be exploited
3

Every one of the 1,221 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.CVE-2023-21492Samsung Mobile · CVSS 4.4 · 2.6% likely

    Samsung

  2. Windows NTFS Information Disclosure VulnerabilityCVE-2025-24984Microsoft · CVSS 4.6 · 2.0% likely

    Microsoft

  3. Milesight Routers - Information DisclosureCVE-2023-43261CVSS 7.5 · 64% likely
  4. SMTP WP Plugin Directory ListingCVE-2020-3523460% likely
  5. Cisco Smart Licensing Utility UnAuthenticated Logs Exposure Leaking Plaintext CredentialsCVE-2024-20440Cisco · CVSS 7.5 · 52% likely

    Cisco

  6. vLLM 0.8.3 - 0.14.0 - Information DisclosureCVE-2026-22778vllm-project · CVSS 9.8 · 18% likelycovered by CyberSIXT

    Vllm

  7. WordPress WP Security Audit Log 3.1.1 - Information DisclosureCVE-2018-871916% likely
  8. Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log FileCVE-2025-9985marceljm · CVSS 5.3 · 13% likely

    Marceljm

  9. WordPress Hummingbird <= 3.18.0 - Sensitive Information Exposure via Log FileCVE-2025-14437wpmudev · CVSS 7.5 · 1.8% likely

    WPMU DEV

  10. vLLM <= 0.23.0 - Anthropic Router Heap Address Information LeakCVE-2026-54236vllm-project · CVSS 5.3 · 0.9% likely

    Vllm

  11. An issue was discovered in Zoho ManageEngine Desktop Central before 100230. There is unauthenticated remote access to all log files of a Desktop Central instance containing critic…CVE-2018-1171614% likely
  12. Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential DisclosureCVE-2024-9466Palo Alto Networks · CVSS 8.2 · 14% likely

    Palo Alto Networks

  13. GreenCMS 2.3.0603 allows remote attackers to obtain sensitive information via a direct request for Data/Log/year_month_day.log.CVE-2018-1260413% likely
  14. An issue was discovered in Zoho ManageEngine Desktop Central before 100251. By leveraging access to a log file, a context-dependent attacker can obtain (depending on the modules c…CVE-2018-117178.6% likely
  15. An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive information, aka 'Azure IoT Java SDK Information Disclosure Vulnerability'.CVE-2019-0741Microsoft · 7.4% likely

    Microsoft

  16. An information disclosure vulnerability was found in Apache NiFi 1.10.0. The sensitive parameter parser would log parsed values for debugging purposes. This would expose literal v…CVE-2020-1928Apache Software Foundation · 4.0% likely

    Apache

  17. In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug lo…CVE-2019-135093.7% likely
  18. The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, which allows remote authenticat…CVE-2012-0814CVSS 6.5 · 3.6% likely
  19. The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTT…CVE-2001-15563.6% likely
  20. In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition c…CVE-2020-9486Apache NiFi · 3.6% likely
  21. A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to ex…CVE-2017-7550Red Hat, Inc. · 3.5% likely

    Red Hat

  22. Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus applicati…CVE-2019-113363.2% likely
  23. In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive property descriptor values. In the event a node attempted to join…CVE-2020-1942Apache NiFi · 3.1% likely
  24. The web server Monkeyd produces a world-readable log (/var/log/monkeyd/master.log) on gentoo.CVE-2013-1771monkey · 3.0% likely
  25. Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect sensitive data passed to a ta…CVE-2018-10855ansible · CVSS 5.9 · 3.0% likely
  26. A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs…CVE-2019-3888Red Hat · CVSS 5.3 · 3.0% likely

    Red Hat

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in