CWE-200 · Information Disclosure (page 45)
Page 45 of 100 — CVEs classified under CWE-200, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-0092 | Medium | 5.0 | 2020-05-14 | In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permissions bypass. This c… |
CVE-2019-13023 | Medium | 6.5 | 2020-05-14 | An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RADIUS secrets, WPA passwords, and SNMP st… |
CVE-2020-12772 | High | 8.8 | 2020-05-12 | An issue was discovered in Ignite Realtime Spark 2.8.3 (and the ROAR plugin for it) on Windows. A chat message can include an IMG element with a SRC attribute… |
CVE-2020-1746 | Medium | 5.0 | 2020-05-12 | A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible… |
CVE-2020-8151 | High | 7.5 | 2020-05-12 | There is a possible information disclosure issue in Active Resource <v5.1.1 that could allow an attacker to create specially crafted requests to access data in… |
CVE-2020-1698 | Medium | 5.0 | 2020-05-11 | A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat… |
CVE-2015-7946 | High | 7.3 | 2020-05-07 | Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the M… |
CVE-2019-18867 | High | 7.5 | 2020-05-07 | Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames and locations, including source code. Th… |
CVE-2020-3259 | High | 7.5 | 2020-05-06 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… |
CVE-2020-11033 | Medium | 6.6 | 2020-05-05 | In GLPI from version 9.1 and before version 9.4.6, any API user with READ right on User itemtype will have access to full list of users when querying apirest.p… |
CVE-2020-5331 | High | 8.8 | 2020-05-04 | RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability. Users’ session information could potentially be stored in cache… |
CVE-2020-10618 | Medium | 5.5 | 2020-05-04 | LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to sensitive information exposure by unauthorized users. |
CVE-2020-6865 | Medium | 6.5 | 2020-04-30 | ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the program's failure to optimize the response of failure to the reques… |
CVE-2020-5890 | Medium | 5.5 | 2020-04-30 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1 and BIG-IQ 5.2.0-7.1.0, when creating a QKView, credentials for binding to LDAP… |
CVE-2020-9387 | Medium | 4.3 | 2020-04-30 | In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the Elasticsearch results for accounts that are not accessible when the… |
CVE-2020-11024 | Medium | 6.1 | 2020-04-29 | In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable to a man-in-the-middle attack. The bug has been fixed in Moonlight v4.0.1 for iOS and tvO… |
CVE-2020-11021 | Medium | 6.3 | 2020-04-29 | Actions Http-Client (NPM @actions/http-client) before version 1.0.8 can disclose Authorization headers to incorrect domain in certain redirect scenarios. The c… |
CVE-2020-11009 | Medium | 6.5 | 2020-04-29 | In Rundeck before version 3.2.6, authenticated users can craft a request that reveals Execution data and logs and Job details that they are not authorized to s… |
CVE-2017-18853 | Medium | 6.5 | 2020-04-29 | Certain NETGEAR devices are affected by password recovery and file access. This affects D8500 1.0.3.27 and earlier, DGN2200v4 1.0.0.82 and earlier, R6300v2 1.0… |
CVE-2020-8481 | Critical | 9.8 | 2020-04-29 | For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0… |
CVE-2016-11059 | High | 7.5 | 2020-04-28 | Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before… |
CVE-2018-21168 | High | 7.5 | 2020-04-27 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D7000 before 1.0.1.52, D7800 before 1.0.1.31, D8500 before 1.0.3.36… |
CVE-2020-10997 | Medium | 6.5 | 2020-04-27 | Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at ru… |
CVE-2020-12070 | High | 7.5 | 2020-04-24 | The Advanced Woo Search plugin version through 1.99 for Wordpress suffers from a sensitive information disclosure vulnerability in every ajax search request vi… |
CVE-2020-11013 | High | 8.5 | 2020-04-24 | Their is an information disclosure vulnerability in Helm from version 3.1.0 and before version 3.2.0. `lookup` is a Helm template function introduced in Helm v… |
CVE-2019-4751 | Medium | 5.3 | 2020-04-24 | IBM Cloud App Management 2019.3.0 and 2019.4.0 reveals a stack trace on certain API requests which can allow an attacker further information about the implemen… |
CVE-2017-18704 | Medium | 6.5 | 2020-04-24 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.32, D6400 before 1.0.0.60, D8500 before… |
CVE-2017-18713 | Medium | 6.5 | 2020-04-24 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.28, R6700 before 1.0.1.36, R6900 before… |
CVE-2017-18712 | Medium | 6.5 | 2020-04-24 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before… |
CVE-2017-18710 | Medium | 4.3 | 2020-04-24 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R8300 before 1.0.2.106 and R8500 before 1.0.2.106. |
CVE-2018-21139 | High | 7.5 | 2020-04-23 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.58, D… |
CVE-2018-21136 | Medium | 4.6 | 2020-04-23 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D3600 before 1.0.0.76 and D6000 before 1.0.0.76. |
CVE-2020-5866 | Medium | 5.5 | 2020-04-23 | In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to change settings, uses sensitive items as… |
CVE-2020-5571 | High | 7.5 | 2020-04-23 | SHARP AQUOS series (AQUOS SH-M02 build number 01.00.05 and earlier, AQUOS SH-RM02 build number 01.00.04 and earlier, AQUOS mini SH-M03 build number 01.00.04 an… |
CVE-2018-21129 | Medium | 6.5 | 2020-04-22 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17. |
CVE-2017-18752 | Medium | 6.5 | 2020-04-22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6120 befo… |
CVE-2017-18766 | Medium | 6.5 | 2020-04-22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects DST6501 before 1.1.0.6 and WNR2000v2 before 1.2.0.8. |
CVE-2017-18769 | Medium | 4.6 | 2020-04-22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before… |
CVE-2020-11687 | High | 7.5 | 2020-04-22 | In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages. |
CVE-2017-18789 | Medium | 5.5 | 2020-04-22 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6250 before V1.0.4.8, R6400 before V1.0.1.22, R6400v2 before V1.0.2… |
CVE-2018-21143 | Medium | 6.5 | 2020-04-21 | NETGEAR GS810EMX devices before 1.0.0.5 are affected by disclosure of sensitive information. |
CVE-2020-5301 | Low | 3.0 | 2020-04-21 | SimpleSAMLphp versions before 1.18.6 contain an information disclosure vulnerability. The module controller in `SimpleSAML\Module` that processes requests for… |
CVE-2017-18797 | Medium | 6.2 | 2020-04-21 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400 before 1.0.1.24, R7900 before 1.0.1.18, R8000 before… |
CVE-2017-18790 | Medium | 6.2 | 2020-04-21 | Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32… |
CVE-2020-1757 | High | 8.1 | 2020-04-21 | A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final… |
CVE-2020-1699 | High | 7.5 | 2020-04-21 | A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions… |
CVE-2017-18847 | Medium | 5.5 | 2020-04-20 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R79… |
CVE-2020-4338 | Medium | 5.5 | 2020-04-16 | IBM MQ 9.1.4 could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data. IBM X-Force ID: 177937. |
CVE-2019-10523 | Medium | 5.5 | 2020-04-16 | Target specific data is being sent to remote server and leads to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdrag… |
CVE-2019-20646 | Critical | 9.8 | 2020-04-15 | NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials. |
CVE-2019-20638 | Medium | 6.5 | 2020-04-15 | NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials. |
CVE-2020-1026 | Critical | 9.8 | 2020-04-15 | A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bugs in the library’s Elliptic Curve Cry… |
CVE-2020-1018 | High | 7.5 | 2020-04-15 | An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when… |
CVE-2020-8316 | Medium | 4.4 | 2020-04-14 | A vulnerability was reported in Lenovo Vantage prior to version 10.2003.10.0 that could allow an authenticated user to read files on the system with elevated p… |
CVE-2020-7801 | Medium | 5.3 | 2020-04-14 | The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Exposure of Sensitive Information to an Unauthorized Act… |
CVE-2020-5330 | High | 8.1 | 2020-04-10 | Dell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500 firmware versions 4.1.0.22 and older and Dell EMC PowerEdge VRTX S… |
CVE-2015-9547 | High | 7.5 | 2020-04-10 | An issue was discovered on Samsung mobile devices with JBP(4.3) and KK(4.4.2) software. Because the READ_LOGS permission is mishandled, sensitive information i… |
CVE-2020-8832 | Medium | 5.5 | 2020-04-10 | The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain I… |
CVE-2019-7305 | Medium | 5.8 | 2020-04-10 | Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible over HTTP. Introduced in the Makefile p… |
CVE-2018-21034 | Medium | 6.5 | 2020-04-09 | In Argo versions prior to v1.5.0-rc1, it was possible for authenticated Argo users to submit API calls to retrieve secrets and other manifests which were store… |
CVE-2020-2732 | Medium | 5.8 | 2020-04-08 | A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circum… |
CVE-2020-1628 | Medium | 5.3 | 2020-04-08 | Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing these IP ad… |
CVE-2020-1987 | Low | 3.9 | 2020-04-08 | An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie… |
CVE-2020-10976 | High | 7.5 | 2020-04-08 | GitLab EE/CE 8.17 to 12.9 is vulnerable to information leakage when querying a merge request widget. |
CVE-2018-21077 | Low | 2.4 | 2020-04-08 | An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) software. There is a Clipboard content disclosure in the locked state because… |
CVE-2018-21076 | Medium | 5.5 | 2020-04-08 | An issue was discovered on Samsung mobile devices with N(7.x) (Exynos8890/8895 chipsets) software. There is information disclosure (a KASLR offset) in the Secu… |
CVE-2018-21074 | Low | 3.3 | 2020-04-08 | An issue was discovered on Samsung mobile devices with M(6.x) (Exynos or Qualcomm chipsets) software. There is information disclosure from a Trustlet via the d… |
CVE-2018-21073 | Low | 2.4 | 2020-04-08 | An issue was discovered on Samsung mobile devices with N(7.x) and O(8.0) (Galaxy S9+, Galaxy S9, Galaxy S8+, Galaxy S8, Note 8). There is access to Clipboard c… |
CVE-2018-21071 | High | 7.3 | 2020-04-08 | An issue was discovered on Samsung mobile devices with M(6.0) software. Because of an unprotected intent, an attacker can read arbitrary files and emails, and… |
CVE-2018-21069 | High | 7.5 | 2020-04-08 | An issue was discovered on Samsung mobile devices with N(7.x) (MediaTek chipsets) software. There is information disclosure (of kernel stack memory) in a Media… |
CVE-2018-21067 | Medium | 5.3 | 2020-04-08 | An issue was discovered on Samsung mobile devices with M(6.0) software. There is an information disclosure in a Trustlet because an address is logged. The Sams… |
CVE-2018-21060 | High | 7.5 | 2020-04-08 | An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. There is a Keyboard learned words leak in the locked state via the emergency… |
CVE-2018-21059 | High | 7.5 | 2020-04-08 | An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. There is Clipboard content visibility in the locked state via the emergency… |
CVE-2018-21056 | Medium | 4.6 | 2020-04-08 | An issue was discovered on Samsung mobile devices with O(8.x) software. The Smartwatch displays Secure Folder Notification content. The Samsung ID is SVE-2018-… |
CVE-2018-21053 | Medium | 4.6 | 2020-04-08 | An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. There is Clipboard access in the lockscreen state via a physical ke… |
CVE-2018-21048 | Medium | 6.2 | 2020-04-08 | An issue was discovered on Samsung mobile devices with O(8.x) software. There is a Notification leak on a locked device in Standalone Dex mode. The Samsung ID… |
CVE-2018-21045 | Medium | 6.2 | 2020-04-08 | An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. There is Clipboard access in the lockscreen state via a copy-and-paste actio… |
CVE-2018-21043 | Low | 3.3 | 2020-04-08 | An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software. There is information disclosure about a kernel pointe… |
CVE-2018-21083 | High | 7.5 | 2020-04-08 | An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.0) (Exynos or Qualcomm chipsets) software. There is information disclosure (of a… |
CVE-2017-18643 | High | 7.5 | 2020-04-08 | An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. There is information disclosure of the kbase_context address of a GPU memory… |
CVE-2017-18687 | Medium | 5.3 | 2020-04-07 | An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. An attacker can obtain the full pathnames of sdcard fi… |
CVE-2017-18686 | Medium | 5.3 | 2020-04-07 | An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) software. Contact information can leak to a log file because of the broadcasting of an… |
CVE-2017-18694 | Medium | 5.3 | 2020-04-07 | An issue was discovered on Samsung mobile devices with software through 2016-10-25 (Exynos5 chipsets). Attackers can read kernel addresses in the log because a… |
CVE-2016-11027 | Low | 2.4 | 2020-04-07 | An issue was discovered on Samsung mobile devices with M(6.0) software. In the Shade Locked state, a physically proximate attacker can read notifications on th… |
CVE-2020-10264 | High | 8.8 | 2020-04-06 | CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE (Real-Time Data Exchange) interface on port 30004 wh… |
CVE-2019-19091 | Medium | 4.3 | 2020-04-02 | For ABB eSOMS versions 4.0 to 6.0.3, HTTPS responses contain comments with sensitive information about the application. An attacker might use this detail infor… |
CVE-2019-19000 | Medium | 6.5 | 2020-04-02 | For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not been properly configured within the application response. This can potentially… |
CVE-2020-1770 | Low | 2.4 | 2020-03-27 | Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue affects: ((OTRS)) Community Edition: 5.0… |
CVE-2020-7944 | High | 7.7 | 2020-03-26 | In Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive… |
CVE-2020-6812 | Medium | 5.3 | 2020-03-25 | The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's AirPods.) Websites with camera or microp… |
CVE-2020-3800 | High | 7.5 | 2020-03-25 | Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006… |
CVE-2020-6993 | High | 7.5 | 2020-03-24 | In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information… |
CVE-2019-20616 | Medium | 5.3 | 2020-03-24 | An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. Gallery leaks a thumbnail of Private Mode content. The Samsung ID is SVE-201… |
CVE-2019-20615 | Medium | 4.6 | 2020-03-24 | An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. Attackers can bypass Factory Reset Protection (FRP) via SVoice T&C. The Sams… |
CVE-2020-4309 | Medium | 5.3 | 2020-03-24 | IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks against the system. I… |
CVE-2020-10871 | Medium | 5.3 | 2020-03-23 | In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOTE: the vendor disputes the significance… |
CVE-2018-20333 | High | 7.5 | 2020-03-20 | An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /update_applist.asp to see if a USB device is attached to the router… |
CVE-2019-15656 | High | 7.5 | 2020-03-19 | D-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 are prone to information disclosure via a simple crafted request to index.asp on the web management se… |
CVE-2019-19677 | Medium | 4.3 | 2020-03-18 | arxes-tolina 3.0.0 allows User Enumeration. |
CVE-2020-1740 | Low | 3.9 | 2020-03-16 | A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same co… |