CWE-201 · 409 kayıt
Insertion of Sensitive Information Into Sent Data
Bu sınıftaki CVE’ler
410 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-26085İstismar yok | Cisco Jabber Desktop and Mobile Client Software Vulnerabilitiescisco · jabber · CWE-201 | Kritik9,9 | — | %2,2 | 6 Oca 2021 |
40Planlayın | CVE-2020-27134İstismar yok | Cisco Jabber Desktop and Mobile Client Software Vulnerabilitiescisco · jabber · CWE-201 | Kritik9,9 | — | %1,7 | 11 Ara 2020 |
40Planlayın | CVE-2025-49408İstismar yok | WordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerabilitywpdeveloper · templately · CWE-201 | Kritik10,0 | — | %0,5 | 20 Ağu 2025 |
39İzleyin | CVE-2018-17245İstismar yok | Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are used when generating Pelastic · kibana · CWE-201 | Kritik9,8 | — | %1,5 | 20 Ara 2018 |
39İzleyin | CVE-2020-27132İstismar yok | Cisco Jabber Desktop and Mobile Client Software Vulnerabilitiescisco · jabber · CWE-201 | Kritik9,9 | — | %1,4 | 11 Ara 2020 |
39İzleyin | CVE-2020-27127İstismar yok | Cisco Jabber Desktop and Mobile Client Software Vulnerabilitiescisco · jabber · CWE-201 | Kritik9,9 | — | %1,4 | 11 Ara 2020 |
39İzleyin | CVE-2020-27133İstismar yok | Cisco Jabber Desktop and Mobile Client Software Vulnerabilitiescisco · jabber · CWE-201 | Kritik9,9 | — | %1,1 | 11 Ara 2020 |
39İzleyin | CVE-2026-5483İstismar yok | Odh-dashboard: odh dashboard kubernetes service account exposureredhat · openshift ai · CWE-201 | Kritik9,9 | — | %0,7 | 10 Nis 2026 |
37İzleyin | CVE-2024-7205İstismar yok | sharing unnecessary device-sensitive information allows Secondary user able to take over devices as primary usercoolkit · ewelink cloud service · CWE-201 | Kritik9,4 | — | %0,5 | 31 Tem 2024 |
36İzleyin | CVE-2021-26566İstismar yok | Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allsynology · diskstation manager · CWE-201 | Kritik9,0 | — | %1,5 | 26 Şub 2021 |
36İzleyin | CVE-2026-39912Kavram kanıtı | v2board / Xboard Authentication Token Exposure via loginWithMailLinkv2board · v2board · CWE-201 | Kritik9,1 | — | %0,7 | 9 Nis 2026 |
36İzleyin | CVE-2026-8924İstismar yok | trailing dot domain super cookiehaxx · curl · CWE-201 | Kritik9,1 | — | %0,7 | 3 Tem 2026 |
36İzleyin | CVE-2025-48749İstismar yok | Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Danetwrix · directory manager · CWE-201 | Kritik9,1 | — | %0,4 | 28 May 2025 |
36İzleyin | CVE-2026-13380İstismar yok | VSee Clinic and API Exposes Cleartext SFTP Credentials in Unauthenticated HTTP Responsesvsee · clinic · CWE-201 | Kritik9,0 | — | %0,4 | 20 Tem 2026 |
35İzleyin | CVE-2026-24477Kavram kanıtı | AnythingLLM has key leak in `systemSettings.js`mintplexlabs · anythingllm · CWE-201 | Yüksek8,7 | — | %1,7 | 26 Oca 2026 |
35İzleyin | CVE-2024-45340İstismar yok | GOAUTH credential leak in cmd/gogo toolchain · cmd/go · CWE-201 | Yüksek8,8 | — | %0,7 | 27 Oca 2025 |
35İzleyin | CVE-2023-48240İstismar yok | XWiki Platform sends cookies to external images in rendered diff and is vulnerable to server side request forgeryxwiki · xwiki · CWE-201 | Yüksek8,8 | — | %0,7 | 20 Kas 2023 |
35İzleyin | CVE-2026-4525İstismar yok | Vault Token Leaked to Backends via Authorization: Bearer Passthrough Headerhashicorp · vault · CWE-201 | Yüksek8,8 | — | %0,6 | 17 Nis 2026 |
35İzleyin | CVE-2024-11638İstismar yok | Gtbabel < 6.6.9 - Unauthenticated Admin Account Takeovergtbabel · gtbabel · CWE-201 | Yüksek8,8 | — | %0,5 | 10 Mar 2025 |
35İzleyin | CVE-2024-8890İstismar yok | Insertion of Sensitive Information Into Sent Data vulnerability on CIRCUTOR Q-SMTcircutor · q-smt firmware · CWE-201 | Yüksek8,8 | — | %0,4 | 18 Eyl 2024 |
34İzleyin | CVE-2020-37150İstismar yok | Edimax Technology EW-7438RPn-v3 Mini 1.27 - Unauthorized Access: Wi-Fi Password Disclosureedimax · ew-7438rpn mini firmware · CWE-201 | Yüksek8,7 | — | %0,8 | 5 Şub 2026 |
34İzleyin | CVE-2025-48045İstismar yok | MICI Network Co. Ltd. NetFax Server Default Administrator Credentials Disclosuremici network co. ltd. · netfax server · CWE-201 | Yüksek8,7 | — | %0,6 | 29 May 2025 |
34İzleyin | CVE-2026-67425İstismar yok | Flyto2 Core: LLM/API keys leak to an attacker-controlled base_urlflytohub · flyto-core · CWE-201 | Yüksek8,6 | — | %0,6 | 29 Tem 2026 |
34İzleyin | CVE-2025-47775İstismar yok | Bullfrog's DNS over TCP bypasses domain filteringbullfrogsec · bullfrog · CWE-201 | Yüksek8,6 | — | %0,5 | 14 May 2025 |
34İzleyin | CVE-2025-49584İstismar yok | XWiki makes title of inaccessible pages available through the class property values REST APIxwiki · xwiki · CWE-201 | Yüksek8,7 | — | %0,4 | 13 Haz 2025 |
- CVE-2020-2608540Planlayın
Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %2cisco · jabber6 Oca 2021
- CVE-2020-2713440Planlayın
Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %2cisco · jabber11 Ara 2020
- CVE-2025-4940840Planlayın
WordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerability
KritikCVSS 10,0İstismar yokEPSS %0wpdeveloper · templately20 Ağu 2025
- CVE-2018-1724539İzleyin
Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are used when generating P
KritikCVSS 9,8İstismar yokEPSS %2elastic · kibana20 Ara 2018
- CVE-2020-2713239İzleyin
Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %1cisco · jabber11 Ara 2020
- CVE-2020-2712739İzleyin
Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %1cisco · jabber11 Ara 2020
- CVE-2020-2713339İzleyin
Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %1cisco · jabber11 Ara 2020
- CVE-2026-548339İzleyin
Odh-dashboard: odh dashboard kubernetes service account exposure
KritikCVSS 9,9İstismar yokEPSS %1redhat · openshift ai10 Nis 2026
- CVE-2024-720537İzleyin
sharing unnecessary device-sensitive information allows Secondary user able to take over devices as primary user
KritikCVSS 9,4İstismar yokEPSS %0coolkit · ewelink cloud service31 Tem 2024
- CVE-2021-2656636İzleyin
Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 all
KritikCVSS 9,0İstismar yokEPSS %2synology · diskstation manager26 Şub 2021
- CVE-2026-3991236İzleyin
v2board / Xboard Authentication Token Exposure via loginWithMailLink
KritikCVSS 9,1Kavram kanıtıEPSS %1v2board · v2board9 Nis 2026
- CVE-2026-892436İzleyin
trailing dot domain super cookie
KritikCVSS 9,1İstismar yokEPSS %1haxx · curl3 Tem 2026
- CVE-2025-4874936İzleyin
Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Da
KritikCVSS 9,1İstismar yokEPSS %0netwrix · directory manager28 May 2025
- CVE-2026-1338036İzleyin
VSee Clinic and API Exposes Cleartext SFTP Credentials in Unauthenticated HTTP Responses
KritikCVSS 9,0İstismar yokEPSS %0vsee · clinic20 Tem 2026
- CVE-2026-2447735İzleyin
AnythingLLM has key leak in `systemSettings.js`
YüksekCVSS 8,7Kavram kanıtıEPSS %2mintplexlabs · anythingllm26 Oca 2026
- CVE-2024-4534035İzleyin
GOAUTH credential leak in cmd/go
YüksekCVSS 8,8İstismar yokEPSS %1go toolchain · cmd/go27 Oca 2025
- CVE-2023-4824035İzleyin
XWiki Platform sends cookies to external images in rendered diff and is vulnerable to server side request forgery
YüksekCVSS 8,8İstismar yokEPSS %1xwiki · xwiki20 Kas 2023
- CVE-2026-452535İzleyin
Vault Token Leaked to Backends via Authorization: Bearer Passthrough Header
YüksekCVSS 8,8İstismar yokEPSS %1hashicorp · vault17 Nis 2026
- CVE-2024-1163835İzleyin
Gtbabel < 6.6.9 - Unauthenticated Admin Account Takeover
YüksekCVSS 8,8İstismar yokEPSS %1gtbabel · gtbabel10 Mar 2025
- CVE-2024-889035İzleyin
Insertion of Sensitive Information Into Sent Data vulnerability on CIRCUTOR Q-SMT
YüksekCVSS 8,8İstismar yokEPSS %0circutor · q-smt firmware18 Eyl 2024
- CVE-2020-3715034İzleyin
Edimax Technology EW-7438RPn-v3 Mini 1.27 - Unauthorized Access: Wi-Fi Password Disclosure
YüksekCVSS 8,7İstismar yokEPSS %1edimax · ew-7438rpn mini firmware5 Şub 2026
- CVE-2025-4804534İzleyin
MICI Network Co. Ltd. NetFax Server Default Administrator Credentials Disclosure
YüksekCVSS 8,7İstismar yokEPSS %1mici network co. ltd. · netfax server29 May 2025
- CVE-2026-6742534İzleyin
Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url
YüksekCVSS 8,6İstismar yokEPSS %1flytohub · flyto-core29 Tem 2026
- CVE-2025-4777534İzleyin
Bullfrog's DNS over TCP bypasses domain filtering
YüksekCVSS 8,6İstismar yokEPSS %0bullfrogsec · bullfrog14 May 2025
- CVE-2025-4958434İzleyin
XWiki makes title of inaccessible pages available through the class property values REST API
YüksekCVSS 8,7İstismar yokEPSS %0xwiki · xwiki13 Haz 2025