NotCVE - "information Disclosure"

12662 results (0.005 seconds)

CVSS: 5.3EPSS: %CPEs: -EXPL: 0

CVE-2025-27013 – WordPress MediCenter theme < 14.7 - Sensitive Data Exposure vulnerability

https://notcve.org/view.php?id=CVE-2025-27013

18 Feb 2025 — Missing Authorization vulnerability in EPC MediCenter - Health Medical Clinic WordPress Theme allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MediCenter - Health Medical Clinic WordPress Theme: from n/a through n/a. • https://patchstack.com/database/wordpress/theme/medicenter/vulnerability/wordpress-medicenter-theme-14-7-sensitive-data-exposure-vulnerability? • CWE-862: Missing Authorization •

CVSS: 8.4EPSS: %CPEs: 1EXPL: 0

CVE-2025-0981 – Session Hijacking via Stored Cross-Site Scripting (XSS) in ChurchCRM Group Editor

https://notcve.org/view.php?id=CVE-2025-0981

18 Feb 2025 — It can also lead to information disclosure, as exposed session cookies can be used to impersonate users and gain unauthorised access to sensitive information. ... It can also lead to information disclosure, as exposed session cookies can be used to impersonate users and gain unauthorised access to sensitive information. • https://github.com/ChurchCRM/CRM/issues/7245 • CWE-287: Improper Authentication •

CVSS: 8.6EPSS: 0%CPEs: 30EXPL: 0

CVE-2022-28693 – hw: cpu: Intel: information disclosure via local access

https://notcve.org/view.php?id=CVE-2022-28693

14 Feb 2025 — Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. ... The unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized user to enable information disclosure via local access. • https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00707.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-420: Unprotected Alternate Channel •

CVSS: 7.5EPSS: 0%CPEs: -EXPL: 0

CVE-2022-26083

https://notcve.org/view.php?id=CVE-2022-26083

14 Feb 2025 — Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local access. • https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00667.html • CWE-1204: Generation of Weak Initialization Vector (IV) •

CVSS: 8.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-12651 – Sensitive Data Exposure in PTT Inc.'

https://notcve.org/view.php?id=CVE-2024-12651

14 Feb 2025 — Exposed Dangerous Method or Function vulnerability in PTT Inc. HGS Mobile App allows Manipulating User-Controlled Variables.This issue affects HGS Mobile App: before 6.5.0. • https://www.usom.gov.tr/bildirim/tr-25-0034 • CWE-749: Exposed Dangerous Method or Function •

CVSS: 6.8EPSS: 0%CPEs: -EXPL: 0

CVE-2025-24567 – WordPress WP Mailster plugin <= 1.8.16.0 - Sensitive Data Exposure vulnerability

https://notcve.org/view.php?id=CVE-2025-24567

14 Feb 2025 — Insertion of Sensitive Information Into Sent Data vulnerability in brandtoss WP Mailster allows Retrieve Embedded Sensitive Data. • https://patchstack.com/database/wordpress/plugin/wp-mailster/vulnerability/wordpress-wp-mailster-plugin-1-8-16-0-sensitive-data-exposure-vulnerability-2? • CWE-201: Insertion of Sensitive Information Into Sent Data •

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2025-0995 – Debian Security Advisory 5866-1

https://notcve.org/view.php?id=CVE-2025-0995

14 Feb 2025 — (Chromium security severity: High) Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. • https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_12.html • CWE-416: Use After Free •

CVSS: 5.9EPSS: 0%CPEs: 1EXPL: 0