CWE-359

CWE-359

No catalog description on file. The MITRE CWE site has the canonical reference.

CVEs (total)

6

Critical

0

High

2

Medium

3

Low

1

Severity distribution

Recent CVEs

showing 6 of 6

CVE-2026-26237High· 7.5EPSS 0%19 h ago
A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We have already fixed the vulnerability in the
CVE-2025-30459Medium· 5.5EPSS 0%1 d ago
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data.
CVE-2026-25699Medium· 6.1EPSS 0%3 d ago
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated us
CVE-2026-7382Medium· 6.5EPSS 0%7 d ago
Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized actor vulnerability in MeWare Software Development Inc. PDKS allows Excavation. This issue affects PDKS: from V16.20200
CVE-2025-1030High· 7.5EPSS 0%7 d ago
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Utarit Informatics Services Inc. SoliClub allows Query System for Information. This issue affects SoliClub: from 5.2.4 before 5.3.7.
CVE-2021-22876LowEPSS 0%2026-04-25
curl/libcurl: Automatic referer leaks credentials
curl

CWE catalog data sourced from MITRE. CVE associations come from NVD weakness mappings; some CVEs carry multiple CWEs.