CWE-223 Omission of Security-relevant Information
baseThe product does not record or display information that would be important for identifying the source or nature of an attack, or determining if an action is safe.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (19)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-31191US | high8.1 | — | ||
DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection.
An attacker can exploit this vulnerabilit… | ||||
| CVE-2023-29156US | medium6.8 | — | ||
DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection.
An attacker can exploit this vulnerability… | ||||
| CVE-2026-31890US | medium5.5 | — | ||
Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. Prior to 0.50.1, in a situation where… | ||||
| CVE-2022-44646US | medium5.3 | — | ||
In JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's settings | ||||
| CVE-2022-30532US | medium5.3 | — | ||
In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy. | ||||
| CVE-2022-22563US | medium4.4 | — | ||
Dell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd. A high-privileged user can exploit this vulnerability to not record information id… | ||||
| CVE-2023-28360US | medium4.3 | — | ||
An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 when a user was saving a file there was no download safety check dialog… | ||||
| CVE-2004-2591US | low2.1 | — | ||
The data-overwrite capability of ButtUglySoftware CleanCache 2.19 does not properly overwrite data in files, which allows attackers to recover the data. | ||||
| CVE-2026-91859US | — | — | ||
Affected versions of MISP can record incorrect access-log data for requests that terminate in an exception.
Because CakeErrorController extends AppController, exception rendering… | ||||
| CVE-2026-90955US | — | — | ||
Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging.
The shell is designed to run actions a… | ||||
| CVE-2026-49426US | — | — | ||
When auditing a system call executed via ptrace(PT_SC_REMOTE), the kernel passed the return value of an internal setup function to AUDIT_SYSCALL_EXIT() rather than the actual resul… | ||||
| CVE-2025-35987US | — | — | ||
Omission of security-relevant information for some Intel(R) Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Author… | ||||
| CVE-2025-52926US | — | — | ||
In scan.rs in spytrap-adb before 0.3.5, matches for known stalkerware are not rendered in the interactive user interface. | ||||
| CVE-2024-52813US | — | — | ||
matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. Versions of the matrix-sdk-crypto Rust crate before 0.8.0 lack a dedicated mechanism to notify that… | ||||
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan