Skip to content

CWE-199 · weakness in Other weaknesses

Information Management Errors

8 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

  1. 389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enter…CVE-2016-54053.1% likely
  2. app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information about subjects of issu…CVE-2015-83461.9% likely
  3. Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that rec…CVE-2014-15911.2% likely
  4. The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).CVE-2016-108410.9% likely
  5. Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality via vectors…CVE-2016-54860.4% likely
  6. Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is needed by jemalloc-ba…CVE-2014-15950.3% likely
  7. Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-51522Huawei · CVSS 6.2 · 0.1% likely

    Huawei

  8. Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2025-58304Huawei · CVSS 4.9 · 0.1% likely

    Huawei

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in