# information_disclosure


- [CVE-2023-49103](https://insights.sbomify.com/CVE-2023-49103/): ownCloud graphapi Information Disclosure (critical 10.0, exploited in the wild)
- [CVE-2021-30116](https://insights.sbomify.com/CVE-2021-30116/): Kaseya Virtual System/Server Administrator (VSA) Information Disclosure (critical 10.0, exploited in the wild)
- [CVE-2022-24990](https://insights.sbomify.com/CVE-2022-24990/): TerraMaster OS Remote Command Execution (critical 9.8, exploited in the wild)
- [CVE-2019-16256](https://insights.sbomify.com/CVE-2019-16256/): SIMalliance Toolbox Browser Command Injection (critical 9.8, exploited in the wild)
- [CVE-2023-4966](https://insights.sbomify.com/CVE-2023-4966/): Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow (critical 9.4, exploited in the wild)
- [CVE-2026-3055](https://insights.sbomify.com/CVE-2026-3055/): Citrix NetScaler Out-of-Bounds Read (critical 9.3, exploited in the wild)
- [CVE-2025-5777](https://insights.sbomify.com/CVE-2025-5777/): Citrix NetScaler ADC and Gateway Out-of-Bounds Read (critical 9.3, exploited in the wild)
- [CVE-2026-67277](https://insights.sbomify.com/CVE-2026-67277/): MikroTik RouterOS Missing Authentication for Critical Function (high 8.8, exploited in the wild)
- [CVE-2014-1812](https://insights.sbomify.com/CVE-2014-1812/): Microsoft Windows Group Policy Preferences Password Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2008-0655](https://insights.sbomify.com/CVE-2008-0655/): Adobe Acrobat and Reader Unspecified (high 8.8, exploited in the wild)
- [CVE-2025-14847](https://insights.sbomify.com/CVE-2025-14847/): MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency (high 8.7, exploited in the wild)
- [CVE-2024-24919](https://insights.sbomify.com/CVE-2024-24919/): Check Point Quantum Security Gateways Information Disclosure (high 8.6, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/types/information-disclosure/