CWE-213
36 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 36Published CVEs36 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-41786
IBM Engineering Requirements Management DOORS Next for J2EE File Disclosure Rule
IBM · Engineering Requirements Management DOORS Next
Medium5.3 - CVE-2026-0893
Uncleared Password Keystrokes Vulnerability
AMI · AptioV
Medium5.8 - CVE-2026-107761
Channel tokens and organization API key exposed in API responses
GitroomHQ · postiz-app
Medium5.3 - CVE-2026-55425
Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields
Graylog2 · graylog2-server
Medium5.0 - CVE-2026-56538
HCL Connections is vulnerable to information disclosure
HCLSoftware · Connections
Low3.5 - CVE-2026-6280
Improper Access Control in Nomysoft Informatics' Nomysem
NOMYSOFT Informatics Education and Consulting Inc. · Nomysem
Medium6.5 - CVE-2026-33216
NATS has MQTT plaintext password disclosure
nats-io · nats-server
High8.6 - CVE-2025-52603
HCL Connections is vulnerable to information disclosure
HCLSoftware · Connections
Low3.5 - CVE-2025-54831
Apache Airflow: Connection sensitive details exposed to users with READ permissions
Apache Software Foundation · Apache Airflow
Medium6.5 - CVE-2024-49827
IBM Concert Software information disclosure
IBM · Concert Software
Low3.7