CWE-213: CWE-213

This vulnerability in Mia Technology's MİA-MED software exposes sensitive user data due to incompatible security policies. It allows attackers to col...

CVE-2022-30350 is an information disclosure vulnerability in Avanquest Software RAD PDF (PDFEscape Online) where the 'white out' redaction feature fai...

This vulnerability in GitLab EE/CE allows users with merge rights to protected branches to potentially bypass security controls and push malicious cod...

Apache Airflow 3.0.3 has a security flaw where users with READ permissions can view sensitive connection information through both API and UI interface...

IBM Concert versions 1.0.0 through 1.0.2 contain an API vulnerability that allows attackers to extract sensitive information through specially crafted...

This vulnerability in Backstage's permission plugin backend allows attackers to extract information from conditional decisions returned by permission ...

This vulnerability in SAP S/4 HANA Statutory Reports allows authenticated users with basic privileges to access restricted internal user data that sho...

HCL Connections has an information disclosure vulnerability where, in specific user navigation scenarios, limited internal metadata can be exposed in ...