Improper Authorization of Index Containing Sensitive Information

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive InformationCVE-2022-35980opensearch-project · CVSS 7.5 · 1.2% likely

   OpenSearch

2. Windows Defender Information Disclosure VulnerabilityCVE-2024-49071Microsoft · CVSS 6.5 · 1.1% likely

   Microsoft

3. IDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERSCVE-2024-25635alfio-event · CVSS 8.8 · 0.7% likely

   Alfio-Event

4. Improper Authorization of Index Containing Sensitive Information in omeka/omeka-sCVE-2023-4560omeka · CVSS 6.5 · 0.7% likely

   Omeka

5. Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information. An authenticated and privileged user could potentially ex…CVE-2022-22565Dell · CVSS 4.7 · 0.5% likely

   Dell

6. EquityPandit 1.0 Insecure Logging Information DisclosureCVE-2019-25605Play · CVSS 7.5 · 0.3% likely
7. Petlibro Smart Pet Feeder Platform through 1.7.31 Information Disclosure via API endpointCVE-2025-3654Petlibrio · CVSS 5.3 · 0.3% likely

   Petlibrio

8. Petlibro Smart Pet Feeder through 1.7.31 Platform Improper Access Control via API endpointCVE-2025-3653Petlibrio · CVSS 7.3 · 0.3% likely

   Petlibrio

9. Petlibro Smart Pet Feeder Platform through 1.7.31 Broken Access Control via API endpointCVE-2025-3660Petlibrio · CVSS 6.5 · 0.2% likely

   Petlibrio

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.