# CWE-1258. Every Advisory and CVE whose sources give the weakness CWE-1258, newest first. ## Records, newest first - [NVIDIA Infrastructure Controller: NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker…](https://agentprime.io/advisories/CVE-2026-65127.md) `CVE-2026-65127` · CVE record: NVIDIA Infrastructure Controller · CVSS 4.1 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-1258 - [Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleared Debug Information…](https://agentprime.io/advisories/CVE-2026-79727.md) `CVE-2026-79727` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 3.3 Low · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-1258 - [Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleared Debug Information…](https://agentprime.io/advisories/CVE-2026-80239.md) `CVE-2026-80239` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 2.4 Low · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-1258 - [WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability](https://agentprime.io/advisories/CVE-2026-66432.md) `CVE-2026-66432` · CVE record: denishua WPJAM Basic · CVSS 7.5 High · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-1258 - [WordPress JetBlog plugin <= 2.4.8 - Sensitive Data Exposure vulnerability](https://agentprime.io/advisories/CVE-2026-52696.md) `CVE-2026-52696` · CVE record: Jetimpex Inc. JetBlog · CVSS 7.5 High · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-1258 - [In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include ...](https://agentprime.io/advisories/PYSEC-2026-135.md) `PYSEC-2026-135`, `CVE-2025-14551` · PyPI `subiquity`: affected `<=24.04.4`, no fixed version yet · CVSS 2.7 Low · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-1258 - [Senstive information disclosure was affecting ubuntu-desktop-provision](https://agentprime.io/advisories/CVE-2025-15480.md) `CVE-2025-15480` · CVE record: Canonical Ubuntu · CVSS 2.7 Low · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-1258 - [Integrated Dell Remote Access Controller: Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174…](https://agentprime.io/advisories/CVE-2026-26948.md) `CVE-2026-26948` · CVE record: Dell Integrated Dell Remote Access Controller · CVSS 4.9 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: CWE-1258 - [Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability.](https://agentprime.io/advisories/CVE-2025-26482.md) `CVE-2025-26482` · CVE record: Dell PowerEdge R770 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 25 Sept 2025 · Tags: CWE-1258 - [WordPress 1 Click WordPress Migration plugin <= 2.5.7 - Sensitive Data Exposure vulnerability](https://agentprime.io/advisories/CVE-2025-32257.md) `CVE-2025-32257` · CVE record: 1clickmigration 1 Click WordPress Migration · CVSS 5.3 Medium · Not analysed yet · Published 4 Apr 2025 · Tags: CWE-1258 - [Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails](https://agentprime.io/advisories/CVE-2024-36913.md) `CVE-2024-36913` · CVE record: Linux Linux · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 May 2024 · Tags: CWE-1258 - [Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl](https://agentprime.io/advisories/CVE-2024-36912.md) `CVE-2024-36912` · CVE record: Linux Linux · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 May 2024 · Tags: CWE-1258 - [Calendar app returns full stacktrace when an error happens while editing appointment](https://agentprime.io/advisories/CVE-2023-48308.md) `CVE-2023-48308` · CVE record: nextcloud security-advisories · CVSS 3.5 Low · Not analysed yet · Published 21 Dec 2023 · Tags: CWE-1258 - [Intel Unison software: Exposure of sensitive system information due to uncleared debug information for some…](https://agentprime.io/advisories/CVE-2022-43666.md) `CVE-2022-43666` · CVE record: Intel Unison software · CVSS 3.3 Low · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-1258 - [Exposure of sensitive Slack webhook URLs in debug logs and traces](https://agentprime.io/advisories/GHSA-4mjx-2gh5-ph8h.md) `GHSA-4mjx-2gh5-ph8h`, `CVE-2022-39292`, `RUSTSEC-2022-0087` · crates.io `slack-morphism`: affected `<1.3.2`, fixed in `1.3.2` · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2022 · Tags: CWE-1258 - [Slack Morphism for Rust before 0.41.0 can leak Slack OAuth client information in application debug logs](https://agentprime.io/advisories/GHSA-99j7-mhfh-w84p.md) `GHSA-99j7-mhfh-w84p`, `CVE-2022-31162`, `RUSTSEC-2022-0086` · crates.io `slack-morphism`: affected `<0.41.0`, fixed in `0.41.0` · CVSS 7.5 High · Not analysed yet · Published 20 Jul 2022 · Tags: Information disclosure, CWE-212, CWE-1258 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .