CWE-538

111 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 4High 29Medium 71Low 7Not scored 0

CVEs per yearBy the year they were published

CVE-2026-56065
WordPress Doofinder for WooCommerce plugin <= 2.17.2 - Sensitive Data Exposure vulnerability
Doofinder · Doofinder for WooCommerce
High7.5
CVE-2026-119199
Nuxt dev server exposes private runtime config through the Nitro dev bundle
nuxt · nuxt
Medium5.9
CVE-2026-115711
Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential Disclosure
Elastic · Elastic Cloud Enterprise
Medium6.4
CVE-2026-115707
Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation
Elastic · Elastic Cloud Enterprise
Medium6.4
CVE-2026-114195
WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability
WP Desk · ShopMagic
Medium5.3
CVE-2026-112027
light0011 cms Uploadify check-exists.php file_exists file information disclosure
light0011 · cms
Medium6.9
CVE-2026-109970
Clevis: clevis: pkcs#11 token pin written to world-readable file
Red Hat · Red Hat Enterprise Linux 10
Medium4.7
CVE-2026-96944
Windows Storage Information Disclosure Vulnerability
Microsoft · Windows 11 Version 24H2
Medium5.5
CVE-2026-108937
code-projects Online Ticket Reservation System medallion.sql file information disclosure
code-projects · Online Ticket Reservation System
Medium6.9
CVE-2026-44828
Qexo initialization endpoint can reset setup state and expose stored credentials
Qexo · Qexo
Critical9.3