CWE-1295 · Information Disclosure
Debug Messages Revealing Unnecessary Information
22CVEs
SortMost likely exploited
22 CVEs with CWE-1295 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-45784Apache Airflow: Sensitive configuration values are not masked in the logs by defaultApache Software Foundation · Apache Airflow · CVSS 7.5 · 2024-11-15 | 7.5 | 1.3% | 2024-11-15 |
| CVE-2021-31412Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19Vaadin · Vaadin · CVSS 5.3 · 2021-06-24 | 5.3 | 1.3% | 2021-06-24 |
| CVE-2026-28811Apache JSPWiki: Error Handling - Reveals Error DetailsApache Software Foundation · Apache JSPWiki · CVSS 7.5 · 2026-07-30 | 7.5 | 0.8% | 2026-07-30 |
| CVE-2022-27597QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)QNAP Systems Inc. · QTS · CVSS 2.7 · 2023-03-29 | 2.7 | 0.7% | 2023-03-29 |
| CVE-2023-4215Advantech WebAccess Debug Messages Revealing Unnecessary InformationAdvantech · WebAccess · CVSS 6.5 · 2023-10-16 | 6.5 | 0.6% | 2023-10-16 |
| CVE-2025-31001WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerabilityTLA Media · GTM Kit · CVSS 7.5 · 2025-04-01 | 7.5 | 0.5% | 2025-04-01 |
| CVE-2024-38516Aimeos HTML client may potentially reveal sensitive information in error logaimeos · ai-client-html · CVSS 8.8 · 2024-06-25 | 8.8 | 0.5% | 2024-06-25 |
| CVE-2025-42604Detailed Error Response Vulnerability in Meon KYC solutionsMeon · KYC solutions · CVSS 6.9 · 2025-04-23 | 6.9 | 0.5% | 2025-04-23 |
| CVE-2023-5392C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most rece…Honeywell · C300 · CVSS 7.5 · 2024-04-11 | 7.5 | 0.5% | 2024-04-11 |
| CVE-2025-59109UART Leaking Sensitive Data in dormakaba registration unit 9002dormakaba · dormakaba registration unit 9002 · CVSS 5.1 · 2026-01-26 | 5.1 | 0.4% | 2026-01-26 |
| CVE-2025-2877Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in edaRed Hat · Red Hat Ansible Automation Platform 2.4 for RHEL 8 · CVSS 6.5 · 2025-03-28 | 6.5 | 0.4% | 2025-03-28 |
| CVE-2025-2469Debug Messages Revealing Unnecessary Information in GitLabGitLab · GitLab · CVSS 3.7 · 2025-04-10 | 3.7 | 0.4% | 2025-04-10 |
| CVE-2024-11217Oauth-server-container: oauth-server-container logs client secret in debug levelRed Hat · Red Hat OpenShift Container Platform 4 · CVSS 4.9 · 2024-11-15 | 4.9 | 0.4% | 2024-11-15 |
| CVE-2024-27179Session disclosure inside the log filesToshiba Tec Corporation · Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 4.7 · 2024-06-14 | 4.7 | 0.3% | 2024-06-14 |
| CVE-2022-34364Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive information to…Dell · BSAFE SSL-J · CVSS 4.4 · 2023-02-10 | 4.4 | 0.2% | 2023-02-10 |
| CVE-2023-28077Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive in…Dell · Dell BSAFE SSL-J · CVSS 4.4 · 2024-02-10 | 4.4 | 0.2% | 2024-02-10 |
| CVE-2025-36744SolarEdge SE3680H - Information Exposure during Bootloader LoopSolarEdge · SE3680H · CVSS 2.4 · 2025-12-12 | 2.4 | 0.2% | 2025-12-12 |
| CVE-2025-46775A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions,…Fortinet · FortiExtender · CVSS 5.2 · 2025-11-18 | 5.2 | 0.2% | 2025-11-18 |
| CVE-2025-12910Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs. (Chromium sec…Google · Chrome · CVSS 6.2 · 2025-11-07 | 6.2 | 0.2% | 2025-11-07 |
| CVE-2025-35031Medical Informatics Engineering Enterprise Health includes session token in debug outputMedical Informatics Engineering · Enterprise Health · CVSS 3.3 · 2025-09-29 | 3.3 | 0.1% | 2025-09-29 |
| CVE-2021-25476An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection mechanism in TEE.Samsung Mobile · Samsung Mobile Devices · CVSS 4.1 · 2021-10-06 | 4.1 | 0.1% | 2021-10-06 |
| CVE-2025-20643In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, if…MediaTek, Inc. · MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853,… · CVSS 5.7 · 2025-02-03 | 5.7 | 0.1% | 2025-02-03 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.