Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-1230

26 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
26
Last 12 months
8
Critical
0
Known exploited
0

Critical 0High 6Medium 17Low 3Not scored 0

CVEs per yearBy the year they were published

  1. 20232
  2. 20244
  3. 202513
  4. 20267

Newest CVEs

  • CVE-2026-14351

    Exposure of Sensitive Information Through Metadata in GitLab

    GitLab · GitLab

    Medium4.3
  • CVE-2025-59601

    Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware

    Qualcomm, Inc. · Snapdragon

    Medium6.5
  • CVE-2026-45544

    Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService

    nextcloud · security-advisories

    Medium4.3
  • CVE-2026-49270

    Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclosure via Crafted BrokerInfo (OpenWire)

    Apache Software Foundation · Apache ActiveMQ Broker

    Medium5.9
  • CVE-2025-31959

    HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.

    HCL Software · BigFix Service Management (SM)

    Low3.5
  • CVE-2026-29055

    Tandoor Recipes: WebP and GIF Image Uploads Bypass EXIF/Metadata Stripping, Leaking GPS Coordinates and PII

    TandoorRecipes · recipes

    Medium5.3
  • CVE-2026-27661

    A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application leaks confidential information in metadata, and…

    Siemens · SINEC Security Monitor

    Medium5.3
  • CVE-2025-13084

    Opto 22 groov View Exposure of Sensitive Information Through Metadata

    Opto 22 · groov View Server

    Medium6.1
  • CVE-2025-30038

    Session ID leakage in Zone.Identifier of downloaded files

    CGM · CGM CLININET

    High7.3
  • CVE-2025-8713

    PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

    PostgreSQL

    Low3.1

Vendors it comes up for most

  1. Dell2
  2. Qualcomm, Inc.2
  3. Apache Software Foundation1
  4. Arista Networks1
  5. CGM1
  6. GitLab1
  7. Google1
  8. HCL Software1
  9. Moodle Project1
  10. Opto 221