CWE-538
113 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 113
- Last 12 months
- 50
- Critical
- 4
- Known exploited
- 0
Critical 4High 30Medium 72Low 7Not scored 0
CVEs per yearBy the year they were published
- 20131
- 20142
- 20172
- 20185
- 20196
- 20201
- 20214
- 20224
- 20238
- 202410
- 202525
- 202645
Newest CVEs
- CVE-2026-62850
FreeScout: Administrative tools.php endpoint is accessible to low-privileged users, enabling filesystem enumeration and unthrottled brute-force of application secrets
freescout-help-desk · freescout
Medium5.3 - CVE-2026-118494
Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9
jreviews.com · JReviews component for Joomla
High8.2 - CVE-2026-56065
WordPress Doofinder for WooCommerce plugin <= 2.17.2 - Sensitive Data Exposure vulnerability
Doofinder · Doofinder for WooCommerce
High7.5 - CVE-2026-119199
Nuxt dev server exposes private runtime config through the Nitro dev bundle
nuxt · nuxt
Medium5.9 - CVE-2026-115711
Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential Disclosure
Elastic · Elastic Cloud Enterprise
Medium6.4 - CVE-2026-115707
Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation
Elastic · Elastic Cloud Enterprise
Medium6.4 - CVE-2026-114195
WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability
WP Desk · ShopMagic
Medium5.3 - CVE-2026-112027
light0011 cms Uploadify check-exists.php file_exists file information disclosure
light0011 · cms
Medium6.9 - CVE-2026-109970
Clevis: clevis: pkcs#11 token pin written to world-readable file
Red Hat · Red Hat Enterprise Linux 10
Medium4.7 - CVE-2026-96944
Windows Storage Information Disclosure Vulnerability
Microsoft · Windows 11 Version 24H2
Medium5.5