CWE-201 · 502 kayıt
Insertion of Sensitive Information Into Sent Data
Bu sınıftaki CVE’ler
503 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-26085İstismar yok | Cisco Jabber Desktop and Mobile Client Software Vulnerabilitiescisco · jabber · CWE-201 | Kritik9,9 | — | %2,3 | 6 Oca 2021 |
40Planlayın | CVE-2020-27134İstismar yok | Cisco Jabber Desktop and Mobile Client Software Vulnerabilitiescisco · jabber · CWE-201 | Kritik9,9 | — | %1,6 | 11 Ara 2020 |
40Planlayın | CVE-2025-49408İstismar yok | WordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerabilitywpdeveloper · templately · CWE-201 | Kritik10,0 | — | %0,5 | 20 Ağu 2025 |
40Planlayın | CVE-2026-123551İstismar yok | OpenAM 14.0.0 before 16.1.4 Session Token Disclosure via Notification WebSocketopenidentityplatform · openam · CWE-201 | Kritik10,0 | — | %0,4 | 6 gün önce |
39İzleyin | CVE-2018-17245İstismar yok | Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are used when generating Pelastic · kibana · CWE-201 | Kritik9,8 | — | %1,5 | 20 Ara 2018 |
39İzleyin | CVE-2020-27132İstismar yok | Cisco Jabber Desktop and Mobile Client Software Vulnerabilitiescisco · jabber · CWE-201 | Kritik9,9 | — | %1,4 | 11 Ara 2020 |
39İzleyin | CVE-2020-27127İstismar yok | Cisco Jabber Desktop and Mobile Client Software Vulnerabilitiescisco · jabber · CWE-201 | Kritik9,9 | — | %1,3 | 11 Ara 2020 |
39İzleyin | CVE-2020-27133İstismar yok | Cisco Jabber Desktop and Mobile Client Software Vulnerabilitiescisco · jabber · CWE-201 | Kritik9,9 | — | %1,1 | 11 Ara 2020 |
39İzleyin | CVE-2026-5483İstismar yok | Odh-dashboard: odh dashboard kubernetes service account exposureredhat · openshift ai · CWE-201 | Kritik9,9 | — | %0,5 | 10 Nis 2026 |
39İzleyin | CVE-2026-92555Kavram kanıtı | Database Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control Panelakin software computer import-export industry and trade co. ltd. · akinsoft wolvox control panel · CWE-201 | Kritik9,8 | — | %0,3 | 8 Eki 2026 |
37İzleyin | CVE-2024-7205İstismar yok | sharing unnecessary device-sensitive information allows Secondary user able to take over devices as primary usercoolkit · ewelink cloud service · CWE-201 | Kritik9,4 | — | %0,4 | 31 Tem 2024 |
36İzleyin | CVE-2021-26566İstismar yok | Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allsynology · diskstation manager · CWE-201 | Kritik9,0 | — | %1,5 | 26 Şub 2021 |
36İzleyin | CVE-2026-86413İstismar yok | Negotiate credentials sent to redirected origincurl · curl · CWE-201 | Kritik9,1 | — | %0,7 | 20 Eki 2026 |
36İzleyin | CVE-2026-86414İstismar yok | leaking host credentials to HTTP proxycurl · curl · CWE-201 | Kritik9,1 | — | %0,6 | 20 Eki 2026 |
36İzleyin | CVE-2026-87861İstismar yok | cross-origin reuse of a Negotiate connectioncurl · curl · CWE-201 | Kritik9,1 | — | %0,6 | 20 Eki 2026 |
36İzleyin | CVE-2026-8924İstismar yok | trailing dot domain super cookiehaxx · curl · CWE-201 | Kritik9,1 | — | %0,6 | 3 Tem 2026 |
36İzleyin | CVE-2026-39912Kavram kanıtı | v2board / Xboard Authentication Token Exposure via loginWithMailLinkv2board · v2board · CWE-201 | Kritik9,1 | — | %0,6 | 9 Nis 2026 |
36İzleyin | CVE-2025-48749İstismar yok | Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Danetwrix · directory manager · CWE-201 | Kritik9,1 | — | %0,4 | 28 May 2025 |
36İzleyin | CVE-2026-88811İstismar yok | Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxysuse · rancher · CWE-201 | Kritik9,1 | — | %0,4 | 2 Kas 2026 |
36İzleyin | CVE-2026-52394İstismar yok | DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.CWE-201 | Kritik9,1 | — | %0,3 | 13 Eki 2026 |
36İzleyin | CVE-2026-13380İstismar yok | VSee Clinic and API Exposes Cleartext SFTP Credentials in Unauthenticated HTTP Responsesvsee · clinic · CWE-201 | Kritik9,0 | — | %0,3 | 20 Tem 2026 |
35İzleyin | CVE-2026-24477Kavram kanıtı | AnythingLLM has key leak in `systemSettings.js`mintplexlabs · anythingllm · CWE-201 | Yüksek8,7 | — | %2,1 | 26 Oca 2026 |
35İzleyin | CVE-2023-48240İstismar yok | XWiki Platform sends cookies to external images in rendered diff and is vulnerable to server side request forgeryxwiki · xwiki · CWE-201 | Yüksek8,8 | — | %0,7 | 20 Kas 2023 |
35İzleyin | CVE-2024-45340İstismar yok | GOAUTH credential leak in cmd/gogo toolchain · cmd/go · CWE-201 | Yüksek8,8 | — | %0,7 | 27 Oca 2025 |
35İzleyin | CVE-2024-11638İstismar yok | Gtbabel < 6.6.9 - Unauthenticated Admin Account Takeovergtbabel · gtbabel · CWE-201 | Yüksek8,8 | — | %0,5 | 10 Mar 2025 |
- CVE-2020-2608540Planlayın
Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %2cisco · jabber6 Oca 2021
- CVE-2020-2713440Planlayın
Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %1cisco · jabber11 Ara 2020
- CVE-2025-4940840Planlayın
WordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerability
KritikCVSS 10,0İstismar yokEPSS %0wpdeveloper · templately20 Ağu 2025
- CVE-2026-12355140Planlayın
OpenAM 14.0.0 before 16.1.4 Session Token Disclosure via Notification WebSocket
KritikCVSS 10,0İstismar yokEPSS %0openidentityplatform · openam6 gün önce
- CVE-2018-1724539İzleyin
Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are used when generating P
KritikCVSS 9,8İstismar yokEPSS %1elastic · kibana20 Ara 2018
- CVE-2020-2713239İzleyin
Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %1cisco · jabber11 Ara 2020
- CVE-2020-2712739İzleyin
Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %1cisco · jabber11 Ara 2020
- CVE-2020-2713339İzleyin
Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %1cisco · jabber11 Ara 2020
- CVE-2026-548339İzleyin
Odh-dashboard: odh dashboard kubernetes service account exposure
KritikCVSS 9,9İstismar yokEPSS %0redhat · openshift ai10 Nis 2026
- CVE-2026-9255539İzleyin
Database Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control Panel
KritikCVSS 9,8Kavram kanıtıEPSS %0akin software computer import-export industry and trade co. ltd. · akinsoft wolvox control panel8 Eki 2026
- CVE-2024-720537İzleyin
sharing unnecessary device-sensitive information allows Secondary user able to take over devices as primary user
KritikCVSS 9,4İstismar yokEPSS %0coolkit · ewelink cloud service31 Tem 2024
- CVE-2021-2656636İzleyin
Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 all
KritikCVSS 9,0İstismar yokEPSS %1synology · diskstation manager26 Şub 2021
- CVE-2026-8641336İzleyin
Negotiate credentials sent to redirected origin
KritikCVSS 9,1İstismar yokEPSS %0curl · curl20 Eki 2026
- CVE-2026-8641436İzleyin
leaking host credentials to HTTP proxy
KritikCVSS 9,1İstismar yokEPSS %0curl · curl20 Eki 2026
- CVE-2026-8786136İzleyin
cross-origin reuse of a Negotiate connection
KritikCVSS 9,1İstismar yokEPSS %0curl · curl20 Eki 2026
- CVE-2026-892436İzleyin
trailing dot domain super cookie
KritikCVSS 9,1İstismar yokEPSS %0haxx · curl3 Tem 2026
- CVE-2026-3991236İzleyin
v2board / Xboard Authentication Token Exposure via loginWithMailLink
KritikCVSS 9,1Kavram kanıtıEPSS %0v2board · v2board9 Nis 2026
- CVE-2025-4874936İzleyin
Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Da
KritikCVSS 9,1İstismar yokEPSS %0netwrix · directory manager28 May 2025
- CVE-2026-8881136İzleyin
Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy
KritikCVSS 9,1İstismar yokEPSS %0suse · rancher2 Kas 2026
- CVE-2026-5239436İzleyin
DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.
KritikCVSS 9,1İstismar yokEPSS %013 Eki 2026
- CVE-2026-1338036İzleyin
VSee Clinic and API Exposes Cleartext SFTP Credentials in Unauthenticated HTTP Responses
KritikCVSS 9,0İstismar yokEPSS %0vsee · clinic20 Tem 2026
- CVE-2026-2447735İzleyin
AnythingLLM has key leak in `systemSettings.js`
YüksekCVSS 8,7Kavram kanıtıEPSS %2mintplexlabs · anythingllm26 Oca 2026
- CVE-2023-4824035İzleyin
XWiki Platform sends cookies to external images in rendered diff and is vulnerable to server side request forgery
YüksekCVSS 8,8İstismar yokEPSS %0xwiki · xwiki20 Kas 2023
- CVE-2024-4534035İzleyin
GOAUTH credential leak in cmd/go
YüksekCVSS 8,8İstismar yokEPSS %0go toolchain · cmd/go27 Oca 2025
- CVE-2024-1163835İzleyin
Gtbabel < 6.6.9 - Unauthenticated Admin Account Takeover
YüksekCVSS 8,8İstismar yokEPSS %0gtbabel · gtbabel10 Mar 2025