Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-199

8 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
8
Last 12 months
1
Critical
1
Known exploited
0

Critical 1High 0Medium 6Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20142
  2. 20162
  3. 20171
  4. 20191
  5. 20241
  6. 20251

Newest CVEs

  • CVE-2025-58304

    Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

    Huawei · HarmonyOS

    Medium4.9
  • CVE-2024-51522

    Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect…

    Huawei · HarmonyOS

    Medium6.2
  • CVE-2016-10841

    The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).

    Product not named

    Medium5.3
  • CVE-2016-5405

    389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through…

    Product not named

    Critical9.8
  • CVE-2016-5486

    Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect…

    Product not named

    Medium5.5
  • CVE-2015-8346

    app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information…

    Product not named

    Medium5.3
  • CVE-2014-1595

    Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is…

    Product not named

    Low2.1
  • CVE-2014-1591

    Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via…

    Product not named

    Medium4.3

Vendors it comes up for most

  1. Huawei2