Filtered by CWE-922
Total 345 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-22687 1 Freesoul Deactivate Plugins - Plugin Manager And Cleanup Project 1 Freesoul Deactivate Plugins - Plugin Manager And Cleanup 2025-01-10 3.7 Low
Insecure Storage of Sensitive Information vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup plugin <= 1.9.4.0 versions.
CVE-2024-8899 1 Jegtheme 1 Jeg Elementor Kit 2025-01-09 4.3 Medium
The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the render_content function in class/elements/views/class-tabs-view.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.
CVE-2024-31278 1 Leap13 1 Premium Addons For Elementor 2025-01-09 4.3 Medium
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Leap13 Premium Addons for Elementor.This issue affects Premium Addons for Elementor: from n/a through 4.10.22.
CVE-2024-2974 1 Wpdeveloper 1 Essential Addons For Elementor 2025-01-08 5.3 Medium
The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 5.9.13 via the load_more function. This can allow unauthenticated attackers to extract sensitive data including private and draft posts.
CVE-2023-3064 1 Mobatime 1 Amxgt 100 2025-01-08 7.5 High
Anonymous user may get the list of existing users managed by the application, that could ease further attacks (see CVE-2023-3065 and 3066)This issue affects Mobatime mobile application AMXGT100 through 1.3.20.
CVE-2024-44292 1 Apple 1 Macos 2025-01-07 5.5 Medium
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data.
CVE-2024-44298 1 Apple 1 Macos 2025-01-07 5.5 Medium
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access information about a user's contacts.
CVE-2023-29757 1 Leap 1 Blue Light Filter 2025-01-06 7.8 High
An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files.
CVE-2023-29755 1 Urbanandroid 1 Twilight 2025-01-06 7.8 High
An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files.
CVE-2024-49201 2024-12-21 4.3 Medium
Keyfactor Remote File Orchestrator (aka remote-file-orchestrator) 2.8 before 2.8.1 allows Information Disclosure: sensitive information could be exposed at the debug logging level.
CVE-2024-34721 1 Google 1 Android 2024-12-17 6.2 Medium
In ensureFileColumns of MediaProvider.java, there is a possible disclosure of files owned by another user due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-21826 1 Openatom 1 Openharmony 2024-12-16 4.3 Medium
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause sensitive information leak through insecure storage.
CVE-2024-54485 1 Apple 2 Ipados, Iphone Os 2024-12-13 5.5 Medium
The issue was addressed by adding additional logic. This issue is fixed in iPadOS 17.7.3, iOS 18.2 and iPadOS 18.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen.
CVE-2024-54477 1 Apple 1 Macos 2024-12-13 5.5 Medium
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to access user-sensitive data.
CVE-2024-44200 1 Apple 2 Ipados, Iphone Os 2024-12-13 5.5 Medium
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may be able to read sensitive location information.
CVE-2024-44216 1 Apple 1 Macos 2024-12-12 6.2 Medium
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to access user-sensitive data.
CVE-2024-44257 1 Apple 1 Macos 2024-12-12 6.2 Medium
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to access sensitive user data.
CVE-2024-44263 1 Apple 2 Ipados, Iphone Os 2024-12-11 4 Medium
A logic issue was addressed with improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may be able to access user-sensitive data.
CVE-2024-44275 1 Apple 1 Macos 2024-12-11 3.3 Low
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A malicious application may be able to modify protected parts of the file system.
CVE-2024-12082 1 Openatom 1 Openharmony 2024-12-11 5.5 Medium
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.