CWE-215 · Information Disclosure
Insertion of Sensitive Information Into Debugging Code
27CVEs
SortMost likely exploited
27 CVEs with CWE-215 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-0721Insertion of Sensitive Information Into Debugging Code in microweber/microwebermicroweber · microweber/microweber · CVSS 8.8 · 2022-02-23 | 8.8 | 1.4% | 2022-02-23 |
| CVE-2019-3781CF CLI does not sanitize user's password in verbose/trace/debugCloud Foundry · CF CLI · CVSS 8.2 · 2019-03-07 | 8.2 | 1.3% | 2019-03-07 |
| CVE-2018-1002104Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly.Kubernetes · k8s.gcr.io/defaultbackend · CVSS 5.3 · 2020-01-14 | 5.3 | 1.1% | 2020-01-14 |
| CVE-2018-1191Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability. A user with access to Garden logs may be able to obtain leaked credentials and…Cloud Foundry · Garden-runC · 2018-03-29 | – | 0.9% | 2018-03-29 |
| CVE-2025-34081CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug InfoContec Co.,Ltd. · CONPROSYS HMI System (CHS) · CVSS 6.9 · 2025-07-01 | 6.9 | 0.7% | 2025-07-01 |
| CVE-2025-27684Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Debug Bundle Contains Sensitive Data V-2022-003.Printerlogic · Vasion Print · CVSS 7.5 · 2025-03-05 | 7.5 | 0.6% | 2025-03-05 |
| CVE-2025-12616PHPGurukul News Portal settings.py insertion of sensitive information into debugging codePHPGurukul · News Portal · CVSS 3.7 · 2025-11-03 | 3.7 | 0.6% | 2025-11-03 |
| CVE-2023-49194WordPress Importify (Dropshipping WooCommerce) plugin <= 1.0.4 - Sensitive Data Exposure vulnerabilityimportify · Importify (Dropshipping WooCommerce) · CVSS 5.3 · 2024-12-09 | 5.3 | 0.5% | 2024-12-09 |
| CVE-2026-74799SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosuresiyuan-note · siyuan · CVSS 9.3 · 2026-08-17 | 9.3 | 0.5% | 2026-08-17 |
| CVE-2026-40173Dgraph: Unauthenticated pprof endpoint leaks admin auth tokendgraph-io · dgraph · CVSS 9.4 · 2026-04-15 | 9.4 | 0.5% | 2026-04-15 |
| CVE-2026-2250Unauthenticated Data Export and Source Code Disclosure via /dbviewer/ in METIS WICMETIS Cyberspace Technology SA · METIS WIC · CVSS 7.5 · 2026-02-11 | 7.5 | 0.5% | 2026-02-11 |
| CVE-2026-33247NATS credentials are exposed in monitoring port via command-line argvnats-io · nats-server · CVSS 7.4 · 2026-03-25 | 7.4 | 0.4% | 2026-03-25 |
| CVE-2024-22194cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration codeCyber-Domain-Ontology · CDO-Utility-Local-UUID · CVSS 2.2 · 2024-01-11 | 2.2 | 0.4% | 2024-01-11 |
| CVE-2026-62652A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symbols have not been removed. This could a…Siemens · Reyrolle 7SR5 · CVSS 5.3 · 2026-09-08 | 5.3 | 0.3% | 2026-09-08 |
| CVE-2026-102628Cadmos LTI exposure of sensitive information via debug modeEummena · Cadmos LTI · CVSS 9.3 · 2026-10-01 | 9.3 | 0.3% | 2026-10-01 |
| CVE-2026-21759HCL Hive is affected by an information exposure vulnerabilityHCLSoftware · HCL Hive · CVSS 4.3 · 2026-08-24 | 4.3 | 0.3% | 2026-08-24 |
| CVE-2026-112190Webkul Aureus ERP composer.json insertion of sensitive information into debugging codeWebkul · Aureus ERP · CVSS 5.3 · 2026-10-19 | 5.3 | 0.3% | 2026-10-19 |
| CVE-2023-51390Information Disclosure Vulnerability in JournalpumpAiven-Open · journalpump · CVSS 6.5 · 2023-12-20 | 6.5 | 0.3% | 2023-12-20 |
| CVE-2025-58598WordPress Klarna Order Management for WooCommerce Plugin <= 1.9.8 - Sensitive Data Exposure VulnerabilityKlarna · Klarna Order Management for WooCommerce · CVSS 6.6 · 2025-09-03 | 6.6 | 0.3% | 2025-09-03 |
| CVE-2026-116820YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq ParameterYesWiki · yeswiki · CVSS 5.3 · 2026-10-26 | 5.3 | 0.2% | 2026-10-26 |
| CVE-2025-0895IBM Cognos Mobile information disclosureIBM · Cognos Analytics Mobile · CVSS 2.4 · 2025-03-02 | 2.4 | 0.2% | 2025-03-02 |
| CVE-2023-21462The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC…Samsung Mobile · Quick Share Agent · CVSS 4.2 · 2023-03-16 | 4.2 | 0.2% | 2023-03-16 |
| CVE-2026-44934Exposed tokens in SUSE Rancher AI Agent logsSUSE · Rancher · CVSS 7 · 2026-07-06 | 7.0 | 0.2% | 2026-07-06 |
| CVE-2026-79694Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information Into Debugging Code v…Dell · Secure Connect Gateway 5.0 - Application · CVSS 5.5 · 2026-09-09 | 5.5 | 0.1% | 2026-09-09 |
| CVE-2026-33966An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. An information Leak occurs in the camera driver due to Ins…Samsung · Exynos 1330 firmware · CVSS 2.8 · 2026-09-14 | 2.8 | 0.1% | 2026-09-14 |
| CVE-2026-20543In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User int…MediaTek, Inc. · MediaTek chipset · CVSS 5.5 · 2026-10-05 | 5.5 | 0.1% | 2026-10-05 |
| CVE-2026-22061CVE-2026-22061 Debug Log Information Disclosure Vulnerability in TridentNetApp · Trident · CVSS 8.2 · 2026-10-09 | 8.2 | 0.1% | 2026-10-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.