CWE-215.

YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq Parameter

• yeswiki
• CWE-215

Webkul Aureus ERP composer.json insertion of sensitive information into debugging code

• Webkul Aureus ERP
• Information disclosure
• CWE-215

CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident

• NetApp Trident
• CWE-215

In Modem, there is a possible information disclosure due to a logic error.

• MediaTek, Inc. MediaTek chipset
• CWE-215

Cadmos LTI exposure of sensitive information via debug mode

• Eummena Cadmos LTI
• CWE-215
• CWE-489

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680.

• Samsung Exynos 1330 firmware
• CWE-215

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information Into Debugging Code vulnerability.

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• CWE-215

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).

• Siemens Reyrolle 7SR5
• CWE-215

HCL Hive is affected by an information exposure vulnerability

• HCLSoftware HCL Hive
• CWE-215

SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosure

• siyuan
• CWE-215

Exposed tokens in SUSE Rancher AI Agent logs

• SUSE Rancher
• CWE-215

Dgraph: Unauthenticated /debug/pprof/cmdline discloses admin auth token, enabling unauthorized access to protected Alpha admin endpoints

• Information disclosure
• Hard-coded credentials

<=1.2.8 · no fixed version yet

NATS credentials are exposed in monitoring port via command-line argv

• CWE-214
• CWE-215

<2.11.15 || >=2.12.0-RC.1, <2.12.6 · fixed in 2.11.15, 2.12.6

Unauthenticated Data Export and Source Code Disclosure via /dbviewer/ in METIS WIC

• METIS Cyberspace Technology SA METIS WIC
• Broken access control
• CWE-215

PHPGurukul News Portal settings.py insertion of sensitive information into debugging code

• PHPGurukul News Portal
• Information disclosure
• CWE-215

Actual Sync-server Gocardless service is logging sensitive data including bearer tokens and account numbers

• Information disclosure
• CWE-215

<25.11.0 · fixed in 25.11.0

WordPress Klarna Order Management for WooCommerce Plugin <= 1.9.8 - Sensitive Data Exposure Vulnerability

• Klarna Order Management for WooCommerce
• CWE-215

CONPROSYS HMI System (CHS) < 3.7.7 Exposed PHP Debug Info

• Contec Co.,Ltd. CONPROSYS HMI System (CHS)
• CWE-215

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Debug Bundle Contains Sensitive Data V-2022-003.

• CWE-215

IBM Cognos Mobile information disclosure

• IBM Cognos Analytics Mobile
• CWE-215

WordPress Importify (Dropshipping WooCommerce) plugin <= 1.0.4 - Sensitive Data Exposure vulnerability

• Importify (Dropshipping WooCommerce)
• CWE-215

Insecure storage of sensitive information in Ivanti ITSM

• Ivanti ITSM
• Information disclosure
• CWE-215

cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code

• CWE-215
• CWE-337

>=0.5.0, <0.5.1 || >=0.6.0, <0.6.1 || >=0.7.0, <0.7.1 || >=0.8.0, <0.8.1 || >=0.9.0, <0.9.1 || >=0.10.0, <0.10.1 || >=0.11.0, <0.11.1 || >=0.12.0, <0.12.1 || >=0.13.0, <0.13.1 || >=0.14.0, <0.14.1 · fixed in 0.5.1, 0.6.1, 0.7.1, 0.8.1, 0.9.1, 0.10.1, 0.11.1, 0.12.1, 0.13.1, 0.14.1

Information Disclosure Vulnerability in Journalpump

• Aiven-Open journalpump
• Broken access control
• CWE-215

Samsung Mobile Quick Share Agent: The sensitive information exposure vulnerability in Quick Share Agent prior to versions…

• Samsung Mobile Quick Share Agent
• CWE-215

Kubernetes ingress exposes sensitive information

• CWE-20
• CWE-215

<1.5 · fixed in 1.5

Insertion of Sensitive Information Into Debugging Code in Microweber

• CWE-215

<1.3 · fixed in 1.3

CF CLI does not sanitize user's password in verbose/trace/debug

• Cloud Foundry CF CLI
• CWE-215

Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability.

• Cloud Foundry Garden-runC
• CWE-215