CWE-200 · Information Disclosure (page 54)
Page 54 of 100 — CVEs classified under CWE-200, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2013-1817 | High | 7.5 | 2019-11-20 | MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive information. |
CVE-2019-10083 | Medium | 5.3 | 2019-11-19 | When updating a Process Group via the API in NiFi versions 1.3.0 to 1.9.2, the response to the request includes all of its contents (at the top most level, not… |
CVE-2012-0843 | Medium | 5.5 | 2019-11-19 | uzbl: Information disclosure via world-readable cookies storage file |
CVE-2011-4919 | High | 7.5 | 2019-11-19 | mpack 1.6 has information disclosure via eavesdropping on mails sent by other users |
CVE-2012-0842 | Medium | 5.5 | 2019-11-19 | surf: cookie jar has read access from other local user |
CVE-2019-19022 | High | 7.5 | 2019-11-17 | iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which might allow remote a… |
CVE-2013-7089 | High | 7.5 | 2019-11-15 | ClamAV before 0.97.7: dbg_printhex possible information leak |
CVE-2019-18987 | Medium | 5.3 | 2019-11-15 | An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Once a specific abuse filter has (accidentally or otherwise) been made public… |
CVE-2013-3070 | High | 7.5 | 2019-11-14 | An Information Disclosure vulnerability exists in Netgear WNDR4700 running firmware 1.0.0.34 in the management web interface, which discloses the PSK of the wi… |
CVE-2012-1169 | Medium | 5.3 | 2019-11-14 | Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page… |
CVE-2012-1161 | Medium | 4.3 | 2019-11-14 | Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results |
CVE-2012-1159 | Medium | 4.3 | 2019-11-14 | Moodle before 2.2.2: Overview report allows users to see hidden courses |
CVE-2012-1158 | Medium | 4.3 | 2019-11-14 | Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export |
CVE-2012-1155 | High | 7.5 | 2019-11-14 | Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the… |
CVE-2019-0390 | Medium | 4.3 | 2019-11-13 | Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Conn… |
CVE-2011-4972 | High | 7.5 | 2019-11-13 | hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private… |
CVE-2019-14367 | High | 7.5 | 2019-11-12 | Slack-Chat through 1.5.5 leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack (channels, members, et… |
CVE-2019-14366 | High | 7.5 | 2019-11-12 | WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack… |
CVE-2019-14365 | High | 7.5 | 2019-11-12 | The Intercom plugin through 1.2.1 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack… |
CVE-2019-1446 | Medium | 5.5 | 2019-11-12 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosur… |
CVE-2019-1440 | Medium | 5.5 | 2019-11-12 | An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerabili… |
CVE-2019-1439 | Medium | 6.5 | 2019-11-12 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis… |
CVE-2019-1436 | Medium | 5.5 | 2019-11-12 | An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerabili… |
CVE-2019-1418 | Low | 3.3 | 2019-11-12 | An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Inform… |
CVE-2019-1402 | Medium | 5.5 | 2019-11-12 | An information disclosure vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office… |
CVE-2019-1381 | Medium | 5.5 | 2019-11-12 | An information disclosure vulnerability exists when the Windows Servicing Stack allows access to unprivileged file locations, aka 'Microsoft Windows Informatio… |
CVE-2019-1374 | Medium | 5.5 | 2019-11-12 | An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Dis… |
CVE-2019-1370 | Medium | 5.5 | 2019-11-12 | An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information D… |
CVE-2019-1324 | Medium | 5.3 | 2019-11-12 | An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles IPv6 flowlabel filled in packets, aka 'Windows TCP/IP Informati… |
CVE-2018-21026 | High | 7.5 | 2019-11-12 | A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.6.5-00 allows an unauthenticated remote user to read internal information. |
CVE-2019-4412 | Medium | 5.3 | 2019-11-09 | IBM Cognos Controller stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs v… |
CVE-2019-13557 | Medium | 5.3 | 2019-11-08 | In Tasy EMR, Tasy WebPortal Versions 3.02.1757 and prior, there is an information exposure vulnerability which may allow a remote attacker to access system and… |
CVE-2008-5083 | Medium | 6.5 | 2019-11-08 | In JON 2.1.x before 2.1.2 SP1, users can obtain unauthorized security information about private resources managed by JBoss ON. |
CVE-2010-2450 | High | 7.5 | 2019-11-07 | The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key… |
CVE-2019-3422 | Medium | 6.2 | 2019-11-07 | The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of related p… |
CVE-2009-5045 | High | 7.5 | 2019-11-06 | Dump Servlet information leak in jetty before 6.1.22. |
CVE-2011-4901 | Medium | 6.5 | 2019-11-06 | TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to extract arbitrary information from the TYPO3 database. |
CVE-2011-4900 | Medium | 6.5 | 2019-11-06 | TYPO3 before 4.5.4 allows Information Disclosure in the backend. |
CVE-2011-4627 | Medium | 6.5 | 2019-11-06 | TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows Information Disclosure on the backend. |
CVE-2019-1877 | Medium | 6.5 | 2019-11-05 | A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to download files attached through chat sess… |
CVE-2019-1734 | Medium | 5.5 | 2019-11-05 | A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker… |
CVE-2010-3673 | Medium | 5.3 | 2019-11-05 | TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API. |
CVE-2016-1000002 | Low | 2.4 | 2019-11-05 | gdm3 3.14.2 and possibly later has an information leak before screen lock |
CVE-2013-4110 | Medium | 5.3 | 2019-11-05 | Cryptocat has an Unspecified Chat Participant User List Disclosure |
CVE-2019-10223 | Medium | 6.5 | 2019-11-05 | A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. An experimental feature was added to the v1.7.0 release that enabled anno… |
CVE-2010-3664 | Medium | 6.5 | 2019-11-04 | TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Information Disclosure on the backend. |
CVE-2013-4105 | High | 7.5 | 2019-11-04 | Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure |
CVE-2013-2262 | High | 7.5 | 2019-11-04 | Cryptocat strophe.js before 2.0.22 has information disclosure |
CVE-2013-2261 | High | 7.5 | 2019-11-04 | Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure |
CVE-2013-4518 | Medium | 5.5 | 2019-11-04 | RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates |
CVE-2019-16908 | Medium | 5.3 | 2019-11-01 | An issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14_J8 for Jira. It is possible to obtain a list of all Jira projects w… |
CVE-2013-2600 | High | 7.5 | 2019-11-01 | MiniUPnPd has information disclosure use of snprintf() |
CVE-2010-2783 | Critical | 9.1 | 2019-10-31 | IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended JNLP Services. |
CVE-2019-17321 | Medium | 5.3 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue. When requesting web page associated with session, could leak username via… |
CVE-2019-7619 | Medium | 5.3 | 2019-10-30 | Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service. An unauthenticated attacker could send… |
CVE-2019-6851 | High | 7.5 | 2019-10-29 | A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions… |
CVE-2019-6850 | High | 7.5 | 2019-10-29 | A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensiti… |
CVE-2019-6849 | High | 7.5 | 2019-10-29 | A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensiti… |
CVE-2019-18612 | Medium | 5.3 | 2019-10-29 | An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Previously hidden (restricted) AbuseFilter filters were viewable (or their dif… |
CVE-2019-18611 | Medium | 6.5 | 2019-10-29 | An issue was discovered in the CheckUser extension through 1.34 for MediaWiki. Certain sensitive information within oversighted edit summaries made available v… |
CVE-2019-10209 | Low | 2.2 | 2019-10-29 | Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan. |
CVE-2012-0046 | High | 7.5 | 2019-10-29 | mediawiki allows deleted text to be exposed |
CVE-2013-4856 | Medium | 6.5 | 2019-10-25 | D-Link DIR-865L has Information Disclosure. |
CVE-2019-4397 | Medium | 6.5 | 2019-10-24 | IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 stores sensitive information in URL parameters. This m… |
CVE-2019-11282 | Medium | 4.3 | 2019-10-23 | Cloud Foundry UAA, versions prior to v74.3.0, contains an endpoint that is vulnerable to SCIM injection attack. A remote authenticated malicious user with scim… |
CVE-2017-8087 | Low | 2.4 | 2019-10-22 | Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83 allows physically proximate attackers to view s… |
CVE-2019-13410 | High | 7.5 | 2019-10-17 | TOPMeeting before version 8.8 (2019/08/19) shows attendees account and password in front end page that allows an attacker to obtain sensitive information by br… |
CVE-2019-17671 | Medium | 5.3 | 2019-10-17 | In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled. |
CVE-2019-15257 | Medium | 6.5 | 2019-10-16 | A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to… |
CVE-2019-12708 | Medium | 6.5 | 2019-10-16 | A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to… |
CVE-2019-12704 | Medium | 6.5 | 2019-10-16 | A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to… |
CVE-2019-3767 | High | 8.2 | 2019-10-14 | Dell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability. Dell ImageAssist stores some sensitive encrypted information in the… |
CVE-2019-2183 | Medium | 5.5 | 2019-10-11 | In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching optimization. This could lead to local i… |
CVE-2015-9492 | High | 7.5 | 2019-10-11 | The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login… |
CVE-2015-9491 | High | 7.5 | 2019-10-11 | The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login… |
CVE-2015-9490 | High | 7.5 | 2019-10-11 | The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pas… |
CVE-2015-9489 | High | 7.5 | 2019-10-11 | The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login… |
CVE-2015-9488 | High | 7.5 | 2019-10-11 | The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (s… |
CVE-2015-9487 | High | 7.5 | 2019-10-11 | The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login… |
CVE-2015-9486 | High | 7.5 | 2019-10-11 | The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, u… |
CVE-2015-9485 | High | 7.5 | 2019-10-11 | The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive informa… |
CVE-2015-9484 | High | 7.5 | 2019-10-11 | The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user… |
CVE-2015-9483 | High | 7.5 | 2019-10-11 | The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive informa… |
CVE-2015-9482 | High | 7.5 | 2019-10-11 | The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as use… |
CVE-2015-9481 | High | 7.5 | 2019-10-11 | The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_p… |
CVE-2019-1369 | Medium | 5.5 | 2019-10-10 | An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information D… |
CVE-2019-1363 | Medium | 5.5 | 2019-10-10 | An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to r… |
CVE-2019-1356 | Medium | 6.5 | 2019-10-10 | An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft Edge based on Edge H… |
CVE-2019-1337 | Medium | 5.5 | 2019-10-10 | An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory, aka 'Windows Update Client Information Di… |
CVE-2019-1334 | Medium | 5.5 | 2019-10-10 | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnera… |
CVE-2019-15859 | Critical | 9.8 | 2019-10-09 | Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a device via the /passwor… |
CVE-2019-4514 | Medium | 5.3 | 2019-10-04 | IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 discloses sensitive information to unauthorized users. The information can be used to mount further… |
CVE-2019-9424 | High | 7.5 | 2019-09-27 | In the Screen Lock, there is a possible information disclosure due to an unusual root cause. In certain circumstances, the setting to hide the unlock pattern c… |
CVE-2018-9581 | Low | 3.3 | 2019-09-27 | In WiFi, the RSSI value and SSID information is broadcast as part of android.net.wifi.RSSI_CHANGE and android.net.wifi.STATE_CHANGE intents. This could lead to… |
CVE-2019-15891 | Medium | 5.3 | 2019-09-26 | An issue was discovered in CKFinder through 2.6.2.1 and 3.x through 3.5.0. The documentation has misleading information that could lead to a conclusion that th… |
CVE-2019-13523 | Medium | 5.3 | 2019-09-26 | In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configur… |
CVE-2019-12664 | High | 7.5 | 2019-09-25 | A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers (ISRs) could al… |
CVE-2019-14666 | High | 8.8 | 2019-09-25 | GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery… |
CVE-2019-10407 | Medium | 6.5 | 2019-09-25 | Jenkins Project Inheritance Plugin 2.0.0 and earlier displayed a list of environment variables passed to a build without masking sensitive variables contribute… |
CVE-2018-21019 | High | 7.5 | 2019-09-23 | Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via compo… |