CWE-1258 · 15 records

Exposure of Sensitive System Information Due to Uncleared Debug Information

CVEs in this class

15 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
38Monitor	CVE-2024-36912No exploit	Drivers: hv: vmbus: Track decrypted status in vmbus_gpadllinux · linux kernel · CWE-1258 Pre-auth	Critical9.6	—	0.9%	May 30, 2024
37Monitor	CVE-2024-36913No exploit	Drivers: hv: vmbus: Leak pages if set_memory_encrypted() failslinux · linux kernel · CWE-1258	Critical9.3	—	0.6%	May 30, 2024
30Monitor	CVE-2022-39292No exploit	Exposure of sensitive Slack webhook URLs in debug logs and tracesslack morphism project · slack morphism · CWE-1258 Pre-auth	High7.5	—	0.8%	Oct 10, 2022
30Monitor	CVE-2026-66432No exploit	WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerabilitydenishua · wpjam basic · CWE-1258 Pre-auth	High7.5	—	0.4%	Aug 13, 2026
30Monitor	CVE-2026-52696No exploit	WordPress JetBlog plugin <= 2.4.8 - Sensitive Data Exposure vulnerabilityjetimpex inc. · jetblog · CWE-1258 Pre-auth	High7.5	—	0.2%	Jun 17, 2026
26Monitor	CVE-2023-48308No exploit	Calendar app returns full stacktrace when an error happens while editing appointmentnextcloud · calendar · CWE-1258	Medium6.5	—	0.5%	Dec 21, 2023
22Monitor	CVE-2022-43666No exploit	Exposure of sensitive system information due to uncleared debug information for some Intel Unison software may allow an authenticated user tintel · unison software · CWE-1258	Medium5.5	—	0.2%	Nov 14, 2023
21Monitor	CVE-2025-32257Proof of concept	WordPress 1 Click WordPress Migration plugin <= 2.5.7 - Sensitive Data Exposure vulnerability1clickmigration · 1 click wordpress migration · CWE-1258 Pre-auth	Medium5.3	—	0.8%	Apr 4, 2025
19Monitor	CVE-2026-26948No exploit	Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.90.00, contain an Expdell · integrated dell remote access controller · CWE-1258	Medium4.9	—	0.3%	Mar 18, 2026
19Monitor	CVE-2025-26482No exploit	Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability.dell · poweredge r770 firmware · CWE-1258	Medium4.9	—	0.3%	Sep 25, 2025
19Monitor	CVE-2026-65127No exploit	NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause exposure of sensitive system information dnvidia · infra controller · CWE-1258	Medium4.9	—	0.2%	Sep 22, 2026
13Monitor	CVE-2026-79727No exploit	Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensidell · secure connect gateway · CWE-1258 Local privilege escalation	Low3.3	—	0.1%	Sep 9, 2026
10Monitor	CVE-2025-15480No exploit	Senstive information disclosure was affecting ubuntu-desktop-provisioncanonical · ubuntu desktop provision · CWE-1258 Pre-auth	Low2.7	—	0.3%	Apr 9, 2026
10Monitor	CVE-2025-14551No exploit	Senstive information disclosure was affecting subiquitycanonical · ubuntu subiquity · CWE-1258 Pre-auth	Low2.7	—	0.2%	Apr 9, 2026
9Monitor	CVE-2026-80239No exploit	Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensidell · secure connect gateway · CWE-1258	Low2.4	—	0.1%	Sep 9, 2026

CVE-2024-36912
38Monitor
Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
linux · linux kernelMay 30, 2024
CVE-2024-36913
37Monitor
Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails
CriticalCVSS 9.3No exploitEPSS 0%
linux · linux kernelMay 30, 2024
CVE-2022-39292
30Monitor
Exposure of sensitive Slack webhook URLs in debug logs and traces
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
slack morphism project · slack morphismOct 10, 2022
CVE-2026-66432
30Monitor
WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
denishua · wpjam basicAug 13, 2026
CVE-2026-52696
30Monitor
WordPress JetBlog plugin <= 2.4.8 - Sensitive Data Exposure vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
jetimpex inc. · jetblogJun 17, 2026
CVE-2023-48308
26Monitor
Calendar app returns full stacktrace when an error happens while editing appointment
MediumCVSS 6.5No exploitEPSS 0%
nextcloud · calendarDec 21, 2023
CVE-2022-43666
22Monitor
Exposure of sensitive system information due to uncleared debug information for some Intel Unison software may allow an authenticated user t
MediumCVSS 5.5No exploitEPSS 0%
intel · unison softwareNov 14, 2023
CVE-2025-32257
21Monitor
WordPress 1 Click WordPress Migration plugin <= 2.5.7 - Sensitive Data Exposure vulnerability
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
1clickmigration · 1 click wordpress migrationApr 4, 2025
CVE-2026-26948
19Monitor
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.90.00, contain an Exp
MediumCVSS 4.9No exploitEPSS 0%
dell · integrated dell remote access controllerMar 18, 2026
CVE-2025-26482
19Monitor
Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability.
MediumCVSS 4.9No exploitEPSS 0%
dell · poweredge r770 firmwareSep 25, 2025
CVE-2026-65127
19Monitor
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause exposure of sensitive system information d
MediumCVSS 4.9No exploitEPSS 0%
nvidia · infra controllerSep 22, 2026
CVE-2026-79727
13Monitor
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensi
LowCVSS 3.3No exploitEPSS 0%
- Local privilege escalation
dell · secure connect gatewaySep 9, 2026
CVE-2025-15480
10Monitor
Senstive information disclosure was affecting ubuntu-desktop-provision
LowCVSS 2.7No exploitEPSS 0%
- Pre-auth
canonical · ubuntu desktop provisionApr 9, 2026
CVE-2025-14551
10Monitor
Senstive information disclosure was affecting subiquity
LowCVSS 2.7No exploitEPSS 0%
- Pre-auth
canonical · ubuntu subiquityApr 9, 2026
CVE-2026-80239
9Monitor
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensi
LowCVSS 2.4No exploitEPSS 0%
dell · secure connect gatewaySep 9, 2026

All vulnerability classes