Skip to content
Noroxi

CWE-215 · 24 records

Insertion of Sensitive Information Into Debugging Code

CVEs in this class

24 records

  • CVE-2024-7569
    40Plan

    An information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023.4 and earlier allows an unauthenticated at

    CriticalCVSS 9.8No exploitEPSS 1%

    ivanti · neurons for itsmAug 13, 2024

  • CVE-2026-74799
    36Monitor

    SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosure

    CriticalCVSS 9.2No exploitEPSS 0%

    siyuan-note · siyuanAug 17, 2026

  • CVE-2026-102628
    36Monitor

    Cadmos LTI exposure of sensitive information via debug mode

    CriticalCVSS 9.2No exploitEPSS 0%

    eummena · cadmos ltiOct 1, 2026

  • CVE-2019-3781
    35Monitor

    CF CLI does not sanitize user's password in verbose/trace/debug

    HighCVSS 8.8No exploitEPSS 1%

    cloudfoundry · command line interfaceMar 7, 2019

  • CVE-2018-1191
    35Monitor

    Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability.

    HighCVSS 8.8No exploitEPSS 0%

    cloudfoundry · cf-deploymentMar 29, 2018

  • CVE-2026-22061
    32Monitor

    CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident

    HighCVSS 8.2No exploitEPSS 0%

    netapp · tridentOct 9, 2026

  • CVE-2025-27684
    30Monitor

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Debug Bundle Contains Sensitive Data

    HighCVSS 7.5No exploitEPSS 0%

    printerlogic · vasion printMar 5, 2025

  • CVE-2026-2250
    30Monitor

    Unauthenticated Data Export and Source Code Disclosure via /dbviewer/ in METIS WIC

    HighCVSS 7.5No exploitEPSS 0%

    metis cyberspace technology sa · metis wicFeb 11, 2026

  • CVE-2023-51390
    30Monitor

    Information Disclosure Vulnerability in Journalpump

    HighCVSS 7.5No exploitEPSS 0%

    aiven · journalpumpDec 20, 2023

  • CVE-2026-44934
    28Monitor

    Exposed tokens in SUSE Rancher AI Agent logs

    HighCVSS 7.0No exploitEPSS 0%

    suse · rancherJul 6, 2026

  • CVE-2025-34081
    27Monitor

    CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info

    MediumCVSS 6.9No exploitEPSS 0%

    contec · conprosys hmi systemJul 1, 2025

  • CVE-2026-62652
    27Monitor

    A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).

    MediumCVSS 6.9No exploitEPSS 0%

    siemens · reyrolle 7sr5Sep 8, 2026

  • CVE-2022-0721
    26Monitor

    Insertion of Sensitive Information Into Debugging Code in microweber/microweber

    MediumCVSS 6.5No exploitEPSS 1%

    microweber · microweberFeb 23, 2022

  • CVE-2025-58598
    26Monitor

    WordPress Klarna Order Management for WooCommerce Plugin <= 1.9.8 - Sensitive Data Exposure Vulnerability

    MediumCVSS 6.6No exploitEPSS 0%

    klarna · klarna order management for woocommerceSep 3, 2025

  • CVE-2026-79694
    22Monitor

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sens

    MediumCVSS 5.5No exploitEPSS 0%

    dell · secure connect gatewaySep 9, 2026

  • CVE-2026-20543
    22Monitor

    In Modem, there is a possible information disclosure due to a logic error.

    MediumCVSS 5.5No exploitEPSS 0%

    mediatek · mt2716 firmwareOct 5, 2026

  • CVE-2018-1002104
    21Monitor

    Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly.

    MediumCVSS 5.3No exploitEPSS 1%

    kubernetes · nginx ingress controllerJan 14, 2020

  • CVE-2026-33247
    21Monitor

    NATS credentials are exposed in monitoring port via command-line argv

    MediumCVSS 5.3No exploitEPSS 0%

    linuxfoundation · nats-serverMar 25, 2026

  • CVE-2023-49194
    21Monitor

    WordPress Importify (Dropshipping WooCommerce) plugin <= 1.0.4 - Sensitive Data Exposure vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    importify · importify (dropshipping woocommerce)Dec 9, 2024

  • CVE-2026-21759
    17Monitor

    HCL Hive is affected by an information exposure vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    hclsoftware · hcl hiveAug 24, 2026

  • CVE-2023-21462
    13Monitor

    The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13

    LowCVSS 3.3No exploitEPSS 0%

    samsung · quick shareMar 16, 2023

  • CVE-2024-22194
    11Monitor

    cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code

    LowCVSS 2.8No exploitEPSS 0%

    lfprojects · case python utilitiesJan 10, 2024

  • CVE-2026-33966
    11Monitor

    An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680.

    LowCVSS 2.8No exploitEPSS 0%

    samsung · exynos 1330 firmwareSep 13, 2026

  • CVE-2025-0895
    9Monitor

    IBM Cognos Mobile information disclosure

    LowCVSS 2.4No exploitEPSS 0%

    ibm · cognos analytics mobileMar 2, 2025

All vulnerability classes