CWE-1295
22 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 22Published CVEs22 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-28811
Apache JSPWiki: Error Handling - Reveals Error Details
Apache Software Foundation · Apache JSPWiki
High7.5 - CVE-2026-48797
Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication
mcp-tool-shop-org · backpropagate
Critical9.3 - CVE-2025-59109
UART Leaking Sensitive Data in dormakaba registration unit 9002
dormakaba · dormakaba registration unit 9002
Medium5.1 - CVE-2025-46775
A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6,…
Fortinet · FortiExtender
Medium5.2 - CVE-2025-12910
Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug…
Google · Chrome
Medium6.2 - CVE-2025-35031
Medical Informatics Engineering Enterprise Health includes session token in debug output
Medical Informatics Engineering · Enterprise Health
Medium4.6 - CVE-2025-42604
Detailed Error Response Vulnerability in Meon KYC solutions
Meon · KYC solutions
Medium6.9 - CVE-2025-2469
Debug Messages Revealing Unnecessary Information in GitLab
GitLab · GitLab
Low3.7 - CVE-2025-31001
WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerability
TLA Media · GTM Kit
High7.5 - CVE-2025-2877
Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in eda
ansible-rulebook
Medium6.5