# CWE-213. Every Advisory and CVE whose sources give the weakness CWE-213, newest first. ## Records, newest first - [Uncleared Password Keystrokes Vulnerability](https://agentprime.io/advisories/CVE-2026-0893.md) `CVE-2026-0893` · CVE record: AMI AptioV · CVSS 5.8 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-213 - [Channel tokens and organization API key exposed in API responses](https://agentprime.io/advisories/CVE-2026-107761.md) `CVE-2026-107761` · CVE record: GitroomHQ postiz-app · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Information disclosure, CWE-213 - [Graylog Server: System Catalog titles endpoint can be used to retrieve values of protected database fields](https://agentprime.io/advisories/GHSA-q79r-r9xg-r863.md) `GHSA-q79r-r9xg-r863`, `CVE-2026-55425` · Maven `org.graylog2:graylog2-server`: affected `>=7.1.0, <7.1.4`, fixed in `7.1.4` · CVSS 5.0 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-213 - [HCL Connections is vulnerable to information disclosure](https://agentprime.io/advisories/CVE-2026-56538.md) `CVE-2026-56538` · CVE record: HCLSoftware Connections · CVSS 3.5 Low · Not analysed yet · Published 27 Jul 2026 · Tags: CWE-213 - [Improper Access Control in Nomysoft Informatics' Nomysem](https://agentprime.io/advisories/CVE-2026-6280.md) `CVE-2026-6280` · CVE record: NOMYSOFT Informatics Education and Consulting Inc. Nomysem · CVSS 6.5 Medium · Not analysed yet · Published 8 Jul 2026 · Tags: CWE-213 - [NATS has MQTT plaintext password disclosure](https://agentprime.io/advisories/GHSA-v722-jcv5-w7mc.md) `GHSA-v722-jcv5-w7mc`, `BIT-nats-2026-33216`, `CVE-2026-33216`, `GO-2026-4836` · Go `github.com/nats-io/nats-server` and 1 more: affected `*`, no fixed version yet · CVSS 8.6 High · Not analysed yet · Published 24 Mar 2026 · Tags: CWE-213, CWE-256 - [HCL Connections is vulnerable to information disclosure](https://agentprime.io/advisories/CVE-2025-52603.md) `CVE-2025-52603` · CVE record: HCLSoftware Connections · CVSS 3.5 Low · Not analysed yet · Published 20 Feb 2026 · Tags: CWE-213 - [Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields to Connection Editing Users, effective...](https://agentprime.io/advisories/GHSA-q475-2pgm-7hvp.md) `GHSA-q475-2pgm-7hvp`, `BIT-airflow-2025-54831`, `CVE-2025-54831`, `PYSEC-2025-85` · PyPI `apache-airflow`: affected , no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 26 Sept 2025 · Tags: CWE-213 - [IBM Concert Software information disclosure](https://agentprime.io/advisories/CVE-2024-49827.md) `CVE-2024-49827` · CVE record: IBM Concert Software · CVSS 3.7 Low · Not analysed yet · Published 18 Aug 2025 · Tags: CWE-213 - [Exposure of Sensitive Information Due to Incompatible Policies in GitLab](https://agentprime.io/advisories/CVE-2025-4976.md) `CVE-2025-4976` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 24 Jul 2025 · Tags: CWE-213 - [Permission policy information leakage in Backstage permission system](https://agentprime.io/advisories/GHSA-f8j4-p5cr-p777.md) `GHSA-f8j4-p5cr-p777`, `CVE-2025-32791` · npm `@backstage/plugin-permission-backend`: affected `<0.6.0`, fixed in `0.6.0` · CVSS 4.3 Medium · Not analysed yet · Published 16 Apr 2025 · Tags: CWE-213 - [Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Sensitive Information Due to Incompatible Policies](https://agentprime.io/advisories/CVE-2025-24316.md) `CVE-2025-24316` · CVE record: Dario Health Dario Application Database and Internet-based Server Infrastructure · CVSS 6.9 Medium · Not analysed yet · Published 28 Feb 2025 · Tags: CWE-213 - [IBM Concert information disclosure](https://agentprime.io/advisories/CVE-2024-49354.md) `CVE-2024-49354` · CVE record: IBM Concert Software · CVSS 5.3 Medium · Not analysed yet · Published 18 Jan 2025 · Tags: CWE-213 - [Exposure of Sensitive Information Due to Incompatible Policies in GitLab](https://agentprime.io/advisories/CVE-2023-5117.md) `CVE-2023-5117` · CVE record: GitLab GitLab · CVSS 3.7 Low · Not analysed yet · Published 25 Dec 2024 · Tags: CWE-213 - [Exposure of Sensitive Information Due to Incompatible Policies in GitLab](https://agentprime.io/advisories/CVE-2023-3441.md) `CVE-2023-3441` · CVE record: GitLab GitLab · CVSS 6.6 Medium · Not analysed yet · Published 1 Oct 2024 · Tags: CWE-213 - [Information Disclosure in SAP S/4 HANA (Statutory Reports)](https://agentprime.io/advisories/CVE-2024-44121.md) `CVE-2024-44121` · CVE record: SAP_SE SAP S/4 HANA (Statutory Reports) · CVSS 4.3 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-213 - [Internal infrastructure data leak in EZD RP](https://agentprime.io/advisories/CVE-2024-7267.md) `CVE-2024-7267` · CVE record: Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP · CVSS 7.1 High · Not analysed yet · Published 7 Aug 2024 · Tags: CWE-213 - [Seeing the SMS Verification Code in Mia Technology's Mia-Med](https://agentprime.io/advisories/CVE-2023-6517.md) `CVE-2023-6517` · CVE record: Mia Technology Inc. MİA-MED · CVSS 7.5 High · Not analysed yet · Published 8 Feb 2024 · Tags: CWE-213 - [Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated users](https://agentprime.io/advisories/GHSA-7ch3-7pp7-7cpq.md) `GHSA-7ch3-7pp7-7cpq`, `CVE-2023-40570`, `PYSEC-2023-154` · PyPI `datasette`: affected `>=1.0a0, <1.0a4`, fixed in `1.0a4` · CVSS 5.3 Medium · Not analysed yet · Published 22 Aug 2023 · Tags: Information disclosure, CWE-213 - [Information Disclosure in SAP Enable Now](https://agentprime.io/advisories/CVE-2023-36919.md) `CVE-2023-36919` · CVE record: SAP_SE SAP Enable Now · CVSS 5.3 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-213 - [Siemens SIMOTION C240: A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1)…](https://agentprime.io/advisories/CVE-2023-27465.md) `CVE-2023-27465` · CVE record: Siemens SIMOTION C240 and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 13 Jun 2023 · Tags: CWE-213 - [Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure.](https://agentprime.io/advisories/CVE-2022-30350.md) `CVE-2022-30350` · CVE record · CVSS 7.5 High · Not analysed yet · Published 30 Mar 2023 · Tags: CWE-213 - [Exposure of sensitive information in AT_Distributor prior to SMR Oct-2022 Release 1 allows local attacker to access SerialNo via log.](https://agentprime.io/advisories/CVE-2022-39848.md) `CVE-2022-39848` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 7 Oct 2022 · Tags: CWE-213 - [Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log.](https://agentprime.io/advisories/CVE-2022-33696.md) `CVE-2022-33696` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 11 Jul 2022 · Tags: CWE-213 - [Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent broadcasting.](https://agentprime.io/advisories/CVE-2022-33694.md) `CVE-2022-33694` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 11 Jul 2022 · Tags: CWE-213 - [Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log.](https://agentprime.io/advisories/CVE-2022-33692.md) `CVE-2022-33692` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 11 Jul 2022 · Tags: CWE-213 - [Information exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.](https://agentprime.io/advisories/CVE-2022-30728.md) `CVE-2022-30728` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 1.9 Low · Not analysed yet · Published 7 Jun 2022 · Tags: CWE-213 - [Information exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.](https://agentprime.io/advisories/CVE-2022-30714.md) `CVE-2022-30714` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 1.9 Low · Not analysed yet · Published 7 Jun 2022 · Tags: CWE-213 - [Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card information.](https://agentprime.io/advisories/CVE-2022-28794.md) `CVE-2022-28794` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 2.2 Low · Not analysed yet · Published 7 Jun 2022 · Tags: CWE-213 - [SAP SE SAP BusinessObjects Business Intelligence Platform: SAP BusinessObjects Business Intelligence Platform - versions 420, 430…](https://agentprime.io/advisories/CVE-2022-22541.md) `CVE-2022-22541` · CVE record: SAP SE SAP BusinessObjects Business Intelligence Platform · No CVSS score · Not analysed yet · Published 12 Apr 2022 · Tags: CWE-213 - [Sensitive Information Exposure in Sylius](https://agentprime.io/advisories/GHSA-7563-75j9-6h5p.md) `GHSA-7563-75j9-6h5p`, `CVE-2022-24742`, `PKSA-4y6p-d93g-pxdh` · Packagist `sylius/sylius`: affected `<1.9.10 || >=1.10, <1.10.11 || >=1.11, <1.11.2`, fixed in `1.9.10`, `1.10.11`, `1.11.2` · CVSS 5.0 Medium · Not analysed yet · Published 14 Mar 2022 · Tags: Information disclosure, CWE-213 - [Junos Space: OpenNMS is accessible via port 9443](https://agentprime.io/advisories/CVE-2020-1652.md) `CVE-2020-1652` · CVE record: Juniper Networks Junos Space · CVSS 5.6 Medium · Not analysed yet · Published 17 Jul 2020 · Tags: CWE-213 - [Centire Yopify leaks customer information](https://agentprime.io/advisories/CVE-2017-3211.md) `CVE-2017-3211` · CVE record: Centire Yopify · CVSS 5.3 Medium · Not analysed yet · Published 15 Jan 2020 · Tags: CWE-213 - [Univention Corporate Server univention-directory-notifier: Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is…](https://agentprime.io/advisories/CVE-2019-1010283.md) `CVE-2019-1010283` · CVE record: Univention Corporate Server univention-directory-notifier · No CVSS score · Not analysed yet · Published 17 Jul 2019 · Tags: CWE-213 - [Information Exposure vulnerability in Eclipse Jetty](https://agentprime.io/advisories/GHSA-r28m-g6j9-r2h5.md) `GHSA-r28m-g6j9-r2h5`, `CVE-2019-10246` · Maven `org.eclipse.jetty:jetty-server`: affected `>=9.2.0, <9.2.28.v20190418 || >=9.3.0, <9.3.27.v20190418 || >=9.4.0, <9.4.17.v20190418`, fixed in `9.2.28.v20190418`, `9.3.27.v20190418`, `9.4.17.v20190418` · CVSS 5.3 Medium · Not analysed yet · Published 23 Apr 2019 · Tags: Information disclosure, CWE-213 - [Installation information leak in Eclipse Jetty](https://agentprime.io/advisories/GHSA-xc67-hjx6-cgg6.md) `GHSA-xc67-hjx6-cgg6`, `CVE-2019-10247` · Maven `org.eclipse.jetty:jetty-server`: affected `>=7.0.0, <9.2.28.v20190418 || >=9.3.0, <9.3.27.v20190418 || >=9.4.0, <9.4.17.v20190418`, fixed in `9.2.28.v20190418`, `9.3.27.v20190418`, `9.4.17.v20190418` · CVSS 5.3 Medium · Not analysed yet · Published 23 Apr 2019 · Tags: Information disclosure, CWE-213 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .