CWE-1295

CVEs classified under CWE-1295, newest first.

4 CVEsRSS

CVE-2026-48797Critical

4mo ago

Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication

▾ Midnightbackpropagate · backpropagateEPSS 0.32%via OSV

CVE-2025-12910Medium· 6.2

11mo ago

Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs

Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs. (Chromium security severity: Low)

▾ Sunlitgoogle · chromeEPSS 0.15%via NVD

CVE-2025-35031Low· 3.3

1y ago

Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output

Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This…

▾ Sunlitmieweb · enterprise_healthEPSS 0.14%via NVD

CVE-2024-11217Medium· 4.9

1y ago

A vulnerability was found in the OAuth-server

A vulnerability was found in the OAuth-server. OAuth-server logs the OAuth2 client secret when the logLevel is Debug higher for OIDC/GitHub/GitLab/Google IDPs login options.

▾ SunlitEPSS 0.37%via NVD