CWE-1295 · 21 records

Debug Messages Revealing Unnecessary Information

CVEs in this class

21 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2024-38516No exploit	Aimeos HTML client may potentially reveal sensitive information in error logaimeos · ai-client-html · CWE-1295	High8.8	—	0.5%	Jun 25, 2024
30Monitor	CVE-2024-45784No exploit	Apache Airflow: Sensitive configuration values are not masked in the logs by defaultapache · airflow · CWE-1295 Pre-auth	High7.5	—	1.3%	Nov 15, 2024
30Monitor	CVE-2026-28811No exploit	Apache JSPWiki: Error Handling - Reveals Error Detailsapache · jspwiki · CWE-1295 Pre-auth	High7.5	—	0.7%	Jul 30, 2026
30Monitor	CVE-2023-4215No exploit	Advantech WebAccess Debug Messages Revealing Unnecessary Informationadvantech · webaccess · CWE-1295 Pre-auth	High7.5	—	0.5%	Oct 16, 2023
30Monitor	CVE-2025-31001No exploit	WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerabilitytla media · gtm kit · CWE-1295 Pre-auth	High7.5	—	0.5%	Apr 1, 2025
30Monitor	CVE-2023-5392No exploit	C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function.honeywell · c300 · CWE-1295 Pre-auth	High7.5	—	0.4%	Apr 11, 2024
27Monitor	CVE-2025-42604No exploit	Detailed Error Response Vulnerability in Meon KYC solutionsmeon · kyc solutions · CWE-1295 Pre-auth	Medium6.9	—	0.4%	Apr 23, 2025
26Monitor	CVE-2025-2877No exploit	Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in edared hat · red hat ansible automation platform 2.4 for rhel 8 · CWE-1295	Medium6.5	—	0.4%	Mar 28, 2025
24Monitor	CVE-2025-12910No exploit	Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive ingoogle · chrome · CWE-1295	Medium6.2	—	0.1%	Nov 8, 2025
22Monitor	CVE-2025-46775No exploit	A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through fortinet · fortiextender firmware · CWE-1295	Medium5.5	—	0.1%	Nov 18, 2025
21Monitor	CVE-2021-31412No exploit	Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19vaadin · flow · CWE-1295 Pre-auth	Medium5.3	—	1.3%	Jun 24, 2021
21Monitor	CVE-2025-2469No exploit	Debug Messages Revealing Unnecessary Information in GitLabgitlab · gitlab · CWE-1295 Pre-auth	Medium5.3	—	0.4%	Apr 10, 2025
20Monitor	CVE-2025-59109No exploit	UART Leaking Sensitive Data in dormakaba registration unit 9002dormakaba · dormakaba registration unit 9002 · CWE-1295	Medium5.1	—	0.4%	Jan 26, 2026
19Monitor	CVE-2024-11217No exploit	Oauth-server-container: oauth-server-container logs client secret in debug levelred hat · red hat openshift container platform 4 · CWE-1295	Medium4.9	—	0.3%	Nov 15, 2024
18Monitor	CVE-2024-27179No exploit	Session disclosure inside the log filestoshiba tec corporation · toshiba tec e-studio multi-function peripheral (mfp) · CWE-1295 Auth bypass	Medium4.7	—	0.2%	Jun 14, 2024
18Monitor	CVE-2025-35031No exploit	Medical Informatics Engineering Enterprise Health includes session token in debug outputmieweb · enterprise health · CWE-1295	Medium4.6	—	0.1%	Sep 29, 2025
17Monitor	CVE-2022-34364No exploit	Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulnerability.dell · bsafe ssl-j · CWE-1295 Local privilege escalation	Medium4.4	—	0.1%	Feb 10, 2023
17Monitor	CVE-2023-28077No exploit	Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability.dell · bsafe ssl-j · CWE-1295 Local privilege escalation	Medium4.4	—	0.1%	Feb 9, 2024
17Monitor	CVE-2021-25476No exploit	An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection megoogle · android · CWE-1295	Medium4.4	—	0.0%	Oct 6, 2021
15Monitor	CVE-2025-20643No exploit	In DA, there is a possible out of bounds read due to a missing bounds check.google · android · CWE-1295	Low3.9	—	0.0%	Feb 3, 2025
9Monitor	CVE-2025-36744No exploit	SolarEdge SE3680H - Information Exposure during Bootloader Loopsolaredge · se3680h firmware · CWE-1295	Low2.4	—	0.1%	Dec 12, 2025

CVE-2024-38516
35Monitor
Aimeos HTML client may potentially reveal sensitive information in error log
HighCVSS 8.8No exploitEPSS 0%
aimeos · ai-client-htmlJun 25, 2024
CVE-2024-45784
30Monitor
Apache Airflow: Sensitive configuration values are not masked in the logs by default
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
apache · airflowNov 15, 2024
CVE-2026-28811
30Monitor
Apache JSPWiki: Error Handling - Reveals Error Details
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
apache · jspwikiJul 30, 2026
CVE-2023-4215
30Monitor
Advantech WebAccess Debug Messages Revealing Unnecessary Information
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
advantech · webaccessOct 16, 2023
CVE-2025-31001
30Monitor
WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
tla media · gtm kitApr 1, 2025
CVE-2023-5392
30Monitor
C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
honeywell · c300Apr 11, 2024
CVE-2025-42604
27Monitor
Detailed Error Response Vulnerability in Meon KYC solutions
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
meon · kyc solutionsApr 23, 2025
CVE-2025-2877
26Monitor
Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in eda
MediumCVSS 6.5No exploitEPSS 0%
red hat · red hat ansible automation platform 2.4 for rhel 8Mar 28, 2025
CVE-2025-12910
24Monitor
Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive in
MediumCVSS 6.2No exploitEPSS 0%
google · chromeNov 8, 2025
CVE-2025-46775
22Monitor
A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through
MediumCVSS 5.5No exploitEPSS 0%
fortinet · fortiextender firmwareNov 18, 2025
CVE-2021-31412
21Monitor
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
vaadin · flowJun 24, 2021
CVE-2025-2469
21Monitor
Debug Messages Revealing Unnecessary Information in GitLab
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
gitlab · gitlabApr 10, 2025
CVE-2025-59109
20Monitor
UART Leaking Sensitive Data in dormakaba registration unit 9002
MediumCVSS 5.1No exploitEPSS 0%
dormakaba · dormakaba registration unit 9002Jan 26, 2026
CVE-2024-11217
19Monitor
Oauth-server-container: oauth-server-container logs client secret in debug level
MediumCVSS 4.9No exploitEPSS 0%
red hat · red hat openshift container platform 4Nov 15, 2024
CVE-2024-27179
18Monitor
Session disclosure inside the log files
MediumCVSS 4.7No exploitEPSS 0%
- Auth bypass
toshiba tec corporation · toshiba tec e-studio multi-function peripheral (mfp)Jun 14, 2024
CVE-2025-35031
18Monitor
Medical Informatics Engineering Enterprise Health includes session token in debug output
MediumCVSS 4.6No exploitEPSS 0%
mieweb · enterprise healthSep 29, 2025
CVE-2022-34364
17Monitor
Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulnerability.
MediumCVSS 4.4No exploitEPSS 0%
- Local privilege escalation
dell · bsafe ssl-jFeb 10, 2023
CVE-2023-28077
17Monitor
Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability.
MediumCVSS 4.4No exploitEPSS 0%
- Local privilege escalation
dell · bsafe ssl-jFeb 9, 2024
CVE-2021-25476
17Monitor
An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection me
MediumCVSS 4.4No exploitEPSS 0%
google · androidOct 6, 2021
CVE-2025-20643
15Monitor
In DA, there is a possible out of bounds read due to a missing bounds check.
LowCVSS 3.9No exploitEPSS 0%
google · androidFeb 3, 2025
CVE-2025-36744
9Monitor
SolarEdge SE3680H - Information Exposure during Bootloader Loop
LowCVSS 2.4No exploitEPSS 0%
solaredge · se3680h firmwareDec 12, 2025

All vulnerability classes