CWE-284 (2634) CWE-79 (1821) CWE-416 (1297) CWE-862 (1175) CWE-89 (1097) CWE-22 (1024) CWE-125 (884) CWE-200 (847) CWE-306 (838) CWE-122 (831) CWE-20 (798) CWE-78 (710) CWE-918 (689) CWE-787 (681) CWE-94 (641) CWE-863 (617) CWE-74 (600) CWE-639 (543) CWE-400 (530) CWE-119 (503) CWE-269 (501) CWE-502 (470) CWE-770 (440) CWE-287 (432) CWE-121 (407) CWE-77 (373) CWE-190 (368) CWE-362 (323) CWE-352 (276) CWE-285 (243)

CWE-538

12 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2023-54346 high 8.7 0.0031 2026-05-05 WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability that allows
CVE-2026-15574 high 7.5 0.0052 2026-07-13 A flaw was found in the vllm-orchestrator-gateway component. The system's production binary logs all
CVE-2026-115707 medium 6.4 — 2026-10-29 Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic
CVE-2026-115711 medium 6.4 — 2026-10-29 Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic
CVE-2026-119199 medium 5.9 — 2026-10-29 Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the Nuxt develo
CVE-2026-96944 medium 5.5 0.0052 2026-10-13 Insertion of sensitive information into externally-accessible file or directory in Windows Storage a
CVE-2026-6160 medium 5.5 0.0031 2026-04-13 A vulnerability was found in code-projects Simple ChatBox 1.0. Affected by this issue is the functio
CVE-2026-7071 medium 5.5 0.0038 2026-04-27 A security vulnerability has been detected in CodeAstro Online Job Portal 1.0. Affected by this vuln
CVE-2026-19229 medium 5.5 0.0056 2026-08-07 A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is so
CVE-2026-33705 medium 5.3 0.0024 2026-04-10 Chamilo LMS is a learning management system. Prior to 1.11.38, Twig template files (.tpl) under /mai
CVE-2026-12762 medium 5.3 0.0040 2026-08-05 IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attack
CVE-2026-114195 medium 5.3 0.0027 2026-10-22 Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP