Skip to content
Noroxi

CWE-497 · 428 records

Exposure of Sensitive System Information to an Unauthorized Control Sphere

CVEs in this class

429 records

  • CVE-2021-31955
    76This week

    Windows Kernel Information Disclosure Vulnerability

    MediumCVSS 5.5KEVWeaponizedEPSS 81%

    microsoft · windows 10 1809Jun 8, 2021

  • CVE-2025-44823
    40Plan

    Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.ph

    HighCVSS 8.8Proof of conceptEPSS 16%

    nagios · log serverOct 7, 2025

  • CVE-2025-10264
    40Plan

    Digiever｜NVR - Exposure of Sensitive Information

    CriticalCVSS 10.0No exploitEPSS 0%

    digiever · ds-1200Sep 12, 2025

  • CVE-2020-25179
    39Monitor

    GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.

    CriticalCVSS 9.8No exploitEPSS 2%

    gehealthcare · 3.0t signa hdxt firmwareDec 14, 2020

  • CVE-2025-1144
    39Monitor

    Quanxun School Affairs System - Exposure of Sensitive Information

    CriticalCVSS 9.8No exploitEPSS 1%

    quanxun · school affairs systemFeb 11, 2025

  • CVE-2024-36554
    39Monitor

    Forever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h and Forever KidsWatch Call Me KW-60 R36CW_YDE_S4_A29_2_V1.0

    CriticalCVSS 9.8No exploitEPSS 0%

    Feb 6, 2025

  • CVE-2025-47699
    39Monitor

    Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the Gallagher Morpho integration could allow an auth

    CriticalCVSS 9.9No exploitEPSS 0%

    gallagher · command centre serverOct 23, 2025

  • CVE-2025-11545
    38Monitor

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sharp Display Solutions projectors allows a atta

    CriticalCVSS 9.5No exploitEPSS 0%

    sharp display solutions, ltd. · np-pa1705ul-w, np-pa1705ul-w+, np-pa1705ul-b, np-pa1705ul-b+, np-pa1505ul-w, np-pa1505ul-w+, np-pa1505ul-b, np-pa1505ul-b+, np-pa1505ul-bjl np-pv800ul-w, np-pv800ul-w+, np-pv800ul-b, np-pv800ul-b+, npDec 22, 2025

  • CVE-2026-14808
    37Monitor

    PROG MIS｜Prog Management System - Exposure of Sensitive Information

    CriticalCVSS 9.3No exploitEPSS 1%

    prog mis · prog management systemJul 6, 2026

  • CVE-2026-34413
    36Monitor

    Xerte Online Toolkits Missing Authentication via connector.php

    HighCVSS 8.8WeaponizedEPSS 3%

    thexerteproject · xerteonlinetoolkitsApr 22, 2026

  • CVE-2025-0061
    36Monitor

    Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform

    CriticalCVSS 9.1No exploitEPSS 1%

    sap · businessobjects business intelligence platformJan 13, 2025

  • CVE-2026-28698
    36Monitor

    Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs

    CriticalCVSS 9.2No exploitEPSS 0%

    pronetiqs · panduit intravueJul 23, 2026

  • CVE-2022-1902
    35Monitor

    A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes.

    HighCVSS 8.8No exploitEPSS 1%

    redhat · advanced cluster securitySep 1, 2022

  • CVE-2025-12779
    35Monitor

    Improper handling of the authentication token in the Amazon WorkSpaces client for Linux, versions 2023.0 through 2024.8, may expose the auth

    HighCVSS 8.8No exploitEPSS 0%

    amazon · amazon workspacesNov 5, 2025

  • CVE-2018-25358
    34Monitor

    D-Link DIR601 2.02NA Credential Disclosure via my_cgi.cgi

    HighCVSS 8.7No exploitEPSS 1%

    d-link · dir-601May 23, 2026

  • CVE-2025-32792
    34Monitor

    ses's global contour bindings leak into Compartment lexical scope

    HighCVSS 8.7No exploitEPSS 1%

    endojs · endoApr 18, 2025

  • CVE-2026-38058
    34Monitor

    ST Engineering iDirect iQ-Series Terminals Exposure of Sensitive System Information to an Unauthorized Control Sphere

    HighCVSS 8.6No exploitEPSS 0%

    st engineering idirect · evolution iq‑series terminalsSep 11, 2026

  • CVE-2022-4985
    34Monitor

    Vodafone H500s WiFi Password Disclosure via activation.json

    HighCVSS 8.7No exploitEPSS 0%

    vodacom · vodafone h500sNov 14, 2025

  • CVE-2026-66840
    34Monitor

    XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497).

    HighCVSS 8.7No exploitEPSS 0%

    xing inc. · xing cptrans-me-xSep 4, 2026

  • CVE-2024-58375
    34Monitor

    OpenTofu before 1.8.3 Secret Variable Leaking via Static Evaluation

    HighCVSS 8.7No exploitEPSS 0%

    opentofu · opentofuAug 16, 2026

  • CVE-2025-4364
    34Monitor

    Exposure of Sensitive System Information to an Unauthorized Control Sphere

    HighCVSS 8.7No exploitEPSS 0%

    assured telematics inc. · fleet management systemMay 20, 2025

  • CVE-2025-54459
    34Monitor

    Vertikal Systems Hospital Manager Backend Services Exposure of Sensitive System Information to an Unauthorized Control Sphere

    HighCVSS 8.7No exploitEPSS 0%

    vertikalsystems · hospital manager backend servicesOct 29, 2025

  • CVE-2025-59098
    34Monitor

    Trace Functionality Leaking Sensitive Data in dormakaba access manager

    HighCVSS 8.7No exploitEPSS 0%

    dormakaba · access manager 92xx-k5Jan 26, 2026

  • CVE-2025-3606
    34Monitor

    Vestel AC Charger Exposure of Sensitive System Information to an Unauthorized Control Sphere

    HighCVSS 8.7No exploitEPSS 0%

    vestel · ac charger evc04Apr 24, 2025

  • CVE-2026-24222
    34Monitor

    NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper a

    HighCVSS 8.6No exploitEPSS 0%

    nvidia · nemoclawApr 28, 2026

All vulnerability classes