Skip to content
CVE Tracker

CWE-213

35 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 35 in the listAtom feed of new CVEsWhat CWE-213 is, at MITRE (opens in a new tab)
Published CVEs
35
Last 12 months
7
Critical
0
Known exploited
0

Critical 0High 5Medium 23Low 7Not scored 0

CVEs per yearBy the year they were published

  1. 20193
  2. 20201
  3. 20201
  4. 20229
  5. 20236
  6. 20255
  7. 20254
  8. 20266

Newest CVEs

  • CVE-2026-0893

    Uncleared Password Keystrokes Vulnerability

    AMI · AptioV

    Medium5.8
  • CVE-2026-107761

    Channel tokens and organization API key exposed in API responses

    GitroomHQ · postiz-app

    Medium5.3
  • CVE-2026-55425

    Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields

    Graylog2 · graylog2-server

    Medium5.0
  • CVE-2026-56538

    HCL Connections is vulnerable to information disclosure

    HCLSoftware · Connections

    Low3.5
  • CVE-2026-6280

    Improper Access Control in Nomysoft Informatics' Nomysem

    NOMYSOFT Informatics Education and Consulting Inc. · Nomysem

    Medium6.5
  • CVE-2026-33216

    NATS has MQTT plaintext password disclosure

    nats-io · nats-server

    High8.6
  • CVE-2025-52603

    HCL Connections is vulnerable to information disclosure

    HCLSoftware · Connections

    Low3.5
  • CVE-2025-54831

    Apache Airflow: Connection sensitive details exposed to users with READ permissions

    Apache Software Foundation · Apache Airflow

    Medium6.5
  • CVE-2024-49827

    IBM Concert Software information disclosure

    IBM · Concert Software

    Low3.7
  • CVE-2025-4976

    Exposure of Sensitive Information Due to Incompatible Policies in GitLab

    GitLab · GitLab

    Medium4.3

Vendors it comes up for most

  1. Samsung Mobile7
  2. GitLab3
  3. HCLSoftware2
  4. IBM2
  5. SAP_SE2
  6. The Eclipse Foundation2
  7. AMI1
  8. Apache Software Foundation1
  9. Centire1
  10. Dario Health1