Vulnerabilities (CVE)

Filtered by CWE-215
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-49194 2024-12-09 N/A 5.3 MEDIUM
Insertion of Sensitive Information Into Debugging Code vulnerability in Importify Importify (Dropshipping WooCommerce) allows Retrieve Embedded Sensitive Data.This issue affects Importify (Dropshipping WooCommerce): from n/a through 1.0.4.
CVE-2024-22194 1 Lfprojects 2 Case Python Utilities, Cdo Local Uuid Utility 2024-11-21 N/A 2.2 LOW
cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in `cdo-local-uuid` at version `0.4.0`, and in `case-utils` in unpatched versions (matching the pattern `0.x.0`) at and since `0.5.0`, before `0.15.0`. The vulnerability stems from a Python function, `cdo_local_uuid.local_uuid()`, and its original implementation `case_utils.local_uuid()`.
CVE-2024-7569 1 Ivanti 1 Neurons For Itsm 2024-09-06 N/A 9.8 CRITICAL
An information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023.4 and earlier allows an unauthenticated attacker to obtain the OIDC client secret via debug information.