CWE-1295

22 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 1High 5Medium 14Low 2Not scored 0

CVEs per yearBy the year they were published

CVE-2026-28811
Apache JSPWiki: Error Handling - Reveals Error Details
Apache Software Foundation · Apache JSPWiki
High7.5
CVE-2026-48797
Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication
mcp-tool-shop-org · backpropagate
Critical9.3
CVE-2025-59109
UART Leaking Sensitive Data in dormakaba registration unit 9002
dormakaba · dormakaba registration unit 9002
Medium5.1
CVE-2025-46775
A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6,…
Fortinet · FortiExtender
Medium5.2
CVE-2025-12910
Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug…
Google · Chrome
Medium6.2
CVE-2025-35031
Medical Informatics Engineering Enterprise Health includes session token in debug output
Medical Informatics Engineering · Enterprise Health
Medium4.6
CVE-2025-42604
Detailed Error Response Vulnerability in Meon KYC solutions
Meon · KYC solutions
Medium6.9
CVE-2025-2469
Debug Messages Revealing Unnecessary Information in GitLab
GitLab · GitLab
Low3.7
CVE-2025-31001
WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerability
TLA Media · GTM Kit
High7.5
CVE-2025-2877
Event-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in eda
ansible-rulebook
Medium6.5