Vulnerabilities (CVE)

Filtered by CWE-1230
Total 24 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-53291 1 Dell 1 Nativeedge Orchestrator 2025-01-29 N/A 7.5 HIGH
Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2023-1974 1 Answer 1 Answer 2024-11-21 N/A 6.5 MEDIUM
Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.
CVE-2024-49395 3 Mutt, Neomutt, Redhat 3 Mutt, Neomutt, Enterprise Linux 2024-11-14 N/A 5.3 MEDIUM
In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from the recipients info.
CVE-2024-8910 1 Hasthemes 1 Ht Mega 2024-10-03 N/A 4.3 MEDIUM
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render function in includes/widgets/htmega_accordion.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.