CWE-213

CWE-213 · 3 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-213, highest CVSS first.

  1. MEDIUM 5.3CVE-2024-417862026-11-08

    IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow a remote attacker to force the Web server to return contents of a sensitive requested file due to improper input validation.

    AI risk analysis on Exploit-DB.ai →

  2. UNSCOREDCVE-2026-08932026-10-13

    AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and fu…

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-107761public PoC2026-10-11

    Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is not meant to receive. The public API's channel delete returns the deleted integratio…

    AI risk analysis on Exploit-DB.ai →